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Introduction 

The International Space Station (ISS) can be considered one of the structural engineering wonders of the 
world. On par with the World Trade Center, the Colossus of Rhodes, the Statue of Liberty, the Great 
Pyramids, the Petronas towers and the Burj Khalifa skyscraper of Dubai, the ambition and scope of the 
ISS structural design, verification and assembly effort is a truly global success story. With its on-orbit life 
projected to be from its beginning in 1998 to the year 2020 (and perhaps beyond), all of those who 
participated in its development can consider themselves part of an historic engineering achievement 
representing all of humanity. 

The structural design and verification of the ISS could be the subject of many scholarly papers. Several 
papers have been written on the structural dynamic characterization of the ISS once it was assembled 
on-orbit [1], but the ground-based activities required to assure structural integrity and structural life of 
the individual elements from delivery to orbit through assembly and planned on-orbit operations have 
never been totally summarized. This paper is intended to give the reader an overview of some of the key 
decisions made during the structural verification planning for the elements of the U.S. On-Orbit Segment 
(USOS) as well as to summarize the many structural tests and structural analyses that were performed 
on its major elements. An effort is made for this paper to be summarily comprehensive, but as with all 
knowledge capture efforts of this kind, there are bound to be errors of omission. Should the reader 
discover any of these, please feel free to contact the principal author. 

The ISS (Figure 1) is composed of pre-integrated truss segments and pressurized elements supplied by 
NASA, the Russian Federal Space Agency (RSA), the European Space Agency (ESA) and the Japanese 
Aerospace Exploration Agency (JAXA). Each of these elements was delivered to orbit by a launch vehicle 
and connected to one another either robotically or autonomously. The primary structure of each 
element was assembled and verified by teams of responsible structural engineers within and among 
their respective agencies and agency contractors. This paper is primarily focused on the structural 
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verification of the NASA-provided elements of the ISS, since that was the principal author's primary 
responsibility and area of knowledge. Where joint structural verification activities were performed 
between NASA and an International Partner, these activities will be summarized. It is left to the various 
International Partners to publish detailed accounts of the structural verification efforts for their 
particular contributions to the ISS. 
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Figure 1 - The International Space Station (ISS) as seen during the fly-around of the Space Shuttle 
Atlantis (OV-104) during the STS-132 mission in May, 2010. 

Summary of ISS Structural Verification 

In all human endeavors, both budget and schedule constraints must be accommodated while still 
producing the required work needed for the project to be successful. The structural verification effort 
for the ISS elements was no exception. At the inception of the ISS Program, many elements of the Space 
Station Freedom Program had progressed through their Critical Design Reviews. Others Space Station 
Freedom hardware was repackaged to accommodate the new assembly sequence which included two 
early Russian elements, the Functional Cargo Block (FGB) (later named "Zarya") and the Service Module 
(later named "Zvezda"). During the ISS Program definition phase, the structural verification testing of 
the USOS elements was "zero-baselined", requiring the principal author and his team to justify to ISS 
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Program Management the need for each individual structural test. This section summarizes the overall 
structural verification philosophy and the baseline structural verification activities for the USOS 
elements of the ISS which emerged from that process. 


Structural Verification Philosophy 

The structural integrity of ISS elements during delivery to orbit by the Space Shuttle Orbiter was a 
safety-of-flight concern. Structural failure of an ISS element in the payload bay of the Orbiter would be a 
potential catastrophic hazard to the vehicle and crew. Once delivered to orbit, the pressurized modules 
would be subjected for decades to internal pressure while both the modules and the integrated truss 
segments would be subjected to on-orbit transient dynamic loads such as docking events, plume 
impingement, EVA-induced loads and crew exercise. Any structural failure on-orbit could potentially be 
catastrophic or at the very least would be difficult to repair. With limited on-orbit structural inspection 
and repair capability, the structural verification approach prior to launch would have to encompass 
certification of each element for all of the anticipated loading events for its entire service life. 

The governing structural requirements documents for the ISS elements were SSP 30558, "Fracture 
Control Requirements for Space Station", SSP 30559, "Structural Design and Verification Requirements 
for Space Station" and SSP 30560, "Glass, Window and Ceramic Structural Design Requirements for 
Space Station". These documents were authored by Mr. Orvis E. Pigg/NASA-JSC (retired) during the 
Space Station Freedom Program and provided the indispensible foundation for development of all of the 
USOS structures. These documents defined the required tests and analyses for structurally certifying the 
ISS elements and referenced Space Shuttle requirement documents NSTS 14046, "Payload Verification 
Requirements" and NSTS-21000-IDD-ISS, "International Space Station Interface Definition Document." 
These requirements were flowed to the individual ISS element Prime Item Development Specifications 
and were addressed in the respective structural verification plans. These plans were negotiated with 
each hardware developer, the Space Shuttle Program and the ISS Program Office Structures and 
Mechanical Systems Team. 

Typically, each major payload that flies in the Orbiter and is attached to both the longeron and keel 
locations of the payload bay ("full-bay payloads") requires a static test, a modal test and an acoustic test 
to structurally certify the payload for the environments it will experience during delivery to orbit. These 
test requirements can be tailored for individual payloads, but doing so requires detailed technical 
rationale which must be approved as an acceptance of risk from all of the stakeholders. Also, since the 
elements of the ISS would withstand on-orbit loads at locations other than the interfaces that are 
loaded during launch, dedicated on-orbit loads testing was performed on areas of the ISS elements and 
major subcomponents where on-orbit loads were critical. In developing the structural verification 
approach for the USOS elements, there were several areas where technical risk was accepted and 
structural testing was not performed, with appropriate rationale, in order to reduce overall Program 
cost and schedule. 
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Structural analysis of each ISS payload element was performed to the indentured part level. SSP 30559 
provided the requirements for factors of safety as well as structural analysis methodologies to be used 
in the certification stress analysis. Each part on the indentured parts list had a structural margin on both 
yield and ultimate strength written against it or was classified as "non-structural" or "good-by- 
inspection." This assured that a responsible stress analyst assessed every part of the element for 
structural integrity. SSP 30558 required that each part receive a fracture control classification and 
specified the requirements for hardware deemed "fracture critical", where failure of the part could 
result in a catastrophic hazard. A Fracture Control Summary Report for each ISS element was prepared 
to document the results of this process. Structural life analysis and the verification of the ISS windows to 
SSP 30560 are discussed in subsequent sections. 

Pressurized Element Structural Verification 
"Unity" Node 

The "Unity" Node, "Destiny" Laboratory and "Quest" Airlock were manufactured and tested by The 
Boeing Company, Space Systems Division in Huntsville, Alabama with contributions of major structural 
components from McDonnell-Douglas Astronautics Company, Grumman Aerospace Corporation and 
Corning, Incorporated. The pressure shells of each module consisted of Aluminum 2219 barrel and 
endcone segments made from stretch-formed panels, joined by circumferential ring frames machined 
from Aluminum 2219 forgings (Figure 2). The radial and axial ports were Electron Beam-Welded 
Aluminum 2219 assemblies provided by Grumman Aerospace (Figure 3). The major longitudinal and 
radial welds were performed in Huntsville using Variable Polarity Plasma Arc (VPPA) Welding (Figures 4 
& 5). A Horizontal Boring Mill was used after each module pressure shell was welded to drill all of the 
penetrations for feedthroughs in the pressure shell. The window in the U.S. Laboratory was made from 
fused silica glass and the hatch windows were made of Chemcor, both provided by Corning, Inc. 
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FIGURE 2,3.1, 1-3 RESOURCE NODE STHUCTHUAL 
ASSEMBLY EXPLODED VIEW 




Figure 3 - Radial Port assembly supplied by Grumman Aerospace. 




Figures 4 - VPPA Welding of the Node 1 pressure shell at The Boeing Company, Huntsville, AL. 


Figures 5 -Overview of welding fixture at The Boeing Company, Huntsville, AL. 
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Two Node structures were fabricated, the Node Structural Test Article (STA) and Node 1 flight article 
(later renamed "Unity"). During the welding process for the Node STA pressure shell, mismatch between 
adjacent welded sections occurred due to the heat input from the VPPA process and the differences in 
stiffness between the parts to be welded and the fixtures used to support them in the welding tool. 
Initially, a dual-pass VPPA weld schedule was employed, but it was found that this schedule input too 
much heat into the local area where the parts were joined. The weld schedule was re-defined as a single 
pass weld-schedule and detailed structural-thermal finite element models were created to predict the 
residual weld mismatch after joining. The tooling stiffness and fixity of the two parts with respect to one 
another was increased. After the parts were manufactured, stress analysis was performed on the as- 
built node configuration to define allowable weld mismatch for the Aluminum 2219 parts to show 
positive margins of safety (Figures 6, 7 and 8) [2]. This analysis process and weld mismatch 
characterization was performed for all of the pressurized elements built in Huntsville, but as more 
modules were fabricated by the same manufacturing team, weld mismatches became smaller and 
localized weld stresses due to mismatch became less of a concern. 

Fracture analysis of the pressure shell welds was performed to assure that the Node met Leak Before 
Burst criteria as defined in SSP 30558. This analysis was based on crack detection probability studies 
performed on welded coupons of Aluminum 2219-T87 using X-ray inspection. Residual stresses and 
weld mismatch effects were taken into account in the fracture analysis. A summary of this process is 
provided in Figures 9 and 10 [3]. This analysis was also performed on all of the other pressurized 
elements. 


EFFECT OF MISMATCH ON TENSILE STRENGTH 
2319TB7 ROOM TEMPERATURE 
DATA FROM MMM55 B26-2423 



MISMATCH | IN (. 


Figure 6 - Allowable data for Aluminum 2219 as a function of weld mismatch. 
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Node Weld Stress Summary 
Pressure Load Case 



Figure 7 - Structural Analysis of mismatched welds on Node 1. 
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Figure 8 - Allowable weld mismatch on Node 1 by region. 
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LBB(Leak Before Burst) / FRACTURE MECHANICS OF WELDS 


SSP 30 S 5 S, Revision B section 4 , 4 . 1.1 ,i 

An acceptable appnoadh to LBB is to shew that a Ihnough Ihe Ihiickness crack of 
length ten L met ihe wall !h Icknese Is stable (ie . Kmax < Kcj at MOP. li fractu re 
mechanics data are not available, or reliable conservative estimates of properties 
cannot be made, a vessel test shall be conducted to verily leak-belore-bursl 
capability. 

Fatigue crack computer program 'NASA FLAGRD' Version 2 Is used lo periorn fracture mechanics. 
Material code M 2 IFB 1 ABl ' 2219-127 plale and sheet GTA weKLPAR' is being used in lieu ol 
missing 2219 VPPA weld per Timothy Vaughn M$FC memo #EH 23 (StM 7 B). 


All wields and parent materials used in the pressure shell of the Resource Node comply 
with LBB requiramants in SSP-2055S. 


Figure 9 - Leak Before Burst analysis process for the pressurized element welds. 


RESIDUAL STRESSES IN WELDS 

Conservative allowables are used for bending and shear, 

ALLOWABLES: Ru-30KSl Ftkj-4BKSl F 9U -22KSl 
Phi and Fau For MSFC-STD-504 
FUi -derived per Couon-e method 
KNOCKDOWNS: %Ftu par MMMSS 82& 2*28 

%Fb*j and %Fsu use same Knockdown lor Flu 
Aug, 1991 Booing weld bend lests, on -160 weW with .tSO* mismatch resulted with: 

+■/■ 57 KSI on weM with perman ent yield, no failure. 

Divhcmint te$l DIG had welds m m rmsmarch tfw.r e«o ceded m nrkifimfttcJiw on 
Node STA. veto, Df6 wes pwutced to 30.4 ps*g untfi wolds n excess of V-50 Kfit. 


Excerpts from : 

'ANALYSIS OF WELDED STRUCTURES" by Kolchi Masubuchi Chapter B,2 

1 . Regiduar strew significantly affects only those phenomena that occu r under a tow 
applied stress, such as brittle failure and stress corrosion caching. 

2. As the level of applied atra$s increases, the effect of residual stress decreases , 

3. The affecf of raslduai sireeg. on the peHonmenca or a wetted structure is neg ligibie 
when the appl'wJ bad has bee* increased beyond the y toWing point. 

4. The residual strew tends to decrease as the structure Is subjected to repeated 
loading. 


Hi®f4y stressed we^ds will yield at proof pressure..,. , 

Welding residual stresses will be ignored lor Ultimate Margin of Safety oeiouiatiens. 


Figure 10 - Weld residual stress analysis process for the pressurized element welds. 
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As originally conceived, the Node and Laboratory module structures were to be certified using dedicated 
structural test articles. These dedicated test articles would subsequently be refurbished to become flight 
articles themselves later in the program. As part of the ISS Program baseline, the Airlock was planned to 
be a protoflight structure to save cost . Therefore, the formulation of the structural test program for 
these elements required that no ultimate loads testing be performed on any of this hardware and that 
test loads applied to these elements induce no permanent detrimental deformation. The pressurized 
elements were designed to a factor of safety of 2.0 x MDP on ultimate, 1.65 x MDP on yield and 1.5 x 
(pressure + mechanical) loads on ultimate and 1.1 x (pressure + mechanical) loads on yield per SSP 
30559. 

The unique structural verification requirements for Node 1 were driven by its six berthing ports (two 
axial ports and four radial ports). During launch, the Node 1 would support a Pressurized Mating 
Adapter (PMA - provided by The Boeing Company, Huntington Beach) from each axial port (Figure 11). 
Node 1 would interface with the Russian FGB through a PMA attached to its aft axial port (Figure 12) as 
well as with the U.S. Laboratory attached to its forward axial port. At the time of Node l's structural 
verification (1996-1997), its structural design was identical to that of Node 2, so the Node Structural Test 
Article's radial and axial ports would have to be tested to loads which enveloped the anticipated loads 
for both Node 1 and Node 2. The axial port mechanical loads were driven by the mechanical loads 
imparted through the Node l's aft axial port where it interfaced through PMA-1 to the Russian 
Functional Cargo Block early in the ISS assembly sequence after the FGB Service Module and Node 1 
were attached together (a Progress docking to the aft port of the Service Module while the ISS was a 
relatively low mass vehicle produced a significant dynamic response). The radial port loads were 
predicted to be highest for Node 2 when both the Japanese Experiment Module and the Centrifuge 
Module were attached to adjacent radial ports and subjected to the transient dynamic loads during a 
Progress vehicle docking. The structural test loads for the Node (STA) axial and radial ports were derived 
from these particular load cases. So, the Node STA testing was based on a combination of load cases 
from both Node 1 and Node 2. 

The first test performed on the Node STA was a proof pressure test to 1.5 times its maximum design 
pressure, which for ISS was calculated to be 22.8 pounds per square inch differential (psid). (Maximum 
Design Pressure (MDP) is calculated assuming two failures within the pressure control system. In other 
words, the pressurized system must be two-failure tolerant against exceeding the MDP of the 
hardware.) The test included the Node STA pressure shell, all internal secondary structure as well as 
pressure domes attached to the zenith radial port Common Berthing Mechanism (CBM) and the aft axial 
port CBM (Figure 13) [4]. 

Proof pressure tests of habitable modules, which are intended to verify workmanship and pressure 
integrity, are not generally used to screen for flaws. To find flaws, Non-Destructive Evaluation (NDE) 
was performed on all Node STA welds prior to the test. This is NDE included X-Ray and ultrasonic 
inspections. The proof pressure tests of both the Node STA and the Node 1 flight article were performed 
at the George C. Marshall Space Flight Center in Huntsville, Alabama. 
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Despite the care that was taken in manufacturing and assembling both the Node 1 and Node STA flight 
hardware, including pre-test hatch window inspections by KSC personnel and a detailed review of 
analyses and build paperwork, the team was concerned about certain parts of the Node structure. The 
proof pressure test was required to assure the overall structural integrity, stress and strain behavior at 
pressure shell welds and in the skin, ovality and planarity of the CBM interfaces. Several manufacturing 
incidents occurred during the Node STA assembly which further reinforced the need for a proof pressure 
test. A radial port hatch was inadvertently dropped inside the Node STA. An incident occurred on the 
Horizontal Boring Mill in Huntsville where the Node 1 was inadvertently bumped by the tooling used to 
drill holes in the pressure shell for feedthrough penetrations. High strains were predicted in four gussets 
on each radial port of both the Node STA and Node 1 flight article during pre-test analysis for the proof 
pressure test. So, the proof pressure testing of each Node was an important first milestone of the ISS 
structures development effort. 



Figure 11 - "Unity" Node in the Orbiter Payload Bay. PMA-2 is forward in the bay, PMA-1 is aft in the 

bay. 


11 




Figure 12 - The nascent ISS - "Unity" Node attached to "Zarya" through PMA-1. 

The Node STA proof pressure test demonstrated that the team's concern about high strain in some 
gussets were valid. The proof pressure test of the Node STA only achieved 20 psid due to high strains 
and creep in four gussets stiffening each of the four radial ports (Figures 14 through 18)[5]. The Node 1 
Flight Article was pressure tested a few days later in a nearby facility on the Redstone Arsenal and this 
article only achieved 18 psid due to high strains and creep in the gussets and asymmetric deflections of 
the pressure shell. The Node 1 Flight Article configuration was different from the Node STA; it consisted 
only of the pressure shell, CBM's and hatches with no internal secondary structure or external pressure 
domes. 

Investigation of these anomalous test results led to the removal of the gussets from both the Node 1 
and the Node STA radial ports and the installation of certain common elements of internal secondary 
structure (two endcone truss and four sets of radial port standoff beams) within each Node which 
helped react the pressure loads throughout the shell (Figures 19, 20 and 21) [6]. Also, a pair of struts 
was added between each adjacent pair of radial ports, ostensibly to off-load the gussets, but once the 
gussets were removed, these struts served to distribute the pressure and mechanical loads more evenly 
between adjacent radial ports and to limit the deflections at the surface of the radial port Active 
Common Berthing Mechanism (CBM) ring (Figures 22 and 23) [7]. 
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fatode F’foof Pressure/Le'a'k Rate Test Setup 



Figure 13 - Diagram of Node STA Proof Pressure and Leak Rate Test Setup. 



I I H P? ™ p O 


Figure 14 - Node 1/Node STA Radial Port gussets. 
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Figure 15 - Instrumentation on Node STA Radial Port gussets for proof pressure test. 
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Figure 16 - Strain gage readings on Nadir radial port gussets during Node STA proof pressure test, 












Figure 21 - Node secondary structure reacting pressure loads. 
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Node 1 Test Investigation 
Structural Design Modifications 



i 0 struts and brackets 
• Titanium GAL-4V 

• 64 A 266 fasteners 
(4 per bracket) 

* Total weight: tld Lbs 




Figure 22 - Internal strut installation on Node STA and Node 1. 





Node Radial Port Strut Modification 
Strut Analysis Summary 


Component 

Load 

Failure Mods 

Margin of Safety 

Strut 

13,400 lb, Tension 

Tension 

1.10 

Fitting 

13,400 lb. Tension 

Soaring 

0.94 

Clevis 

13,400 lb. Tension 

Bearing 

2J0 

Fasteners 

4556 lb. Tension 
2399 lb. Shear 

Tension/S hear 
Interaction 

0.08 

1 



■ Load condition: 15.2 psig pressure plus 1000 lb, strut preload 

* Design factor of safety: 2.0 

* Fastener fitting factor: 1.15 

* Material: TI-6AI-4V 


Figure 23 - Node Radial Port Strut Structural analysis. 

Subsequent to these modifications, both the Node 1 and the Node STA internal volumes were 
successfully proof tested to 22.8 psid. One pressure dome was attached to the zenith radial port and 
another pressure dome was attached to an axial port. After 22.8 psid was achieved, pressure 
equalization valves were opened between the Node internal volume and each of the domes in order to 
proof test the vestibule formed by the attachment of an adjacent pressurized element to each port. The 
initial configuration of the CBMs at these two port locations had all 16 motorized bolts engaged. After 
the 16-bolt proof pressure test was completed, the highest loaded motorized bolt was backed off so 
that both structural and pressure integrity could be demonstrated with 15 of 16 bolts engaged (Figure 
24) [8]. These tests were also successful. However, at the end of this test sequence on the Node STA, 
which took nearly 20 hours to complete, a circuit breaker tripped causing an emergency venting of the 
Node STA during the final stages of depressurization. This trip was due to overloading of a power strip 
within the test set-up. This venting, had it occurred earlier in the test sequence when the vestibule 
volume was still pressurized, could have caused significant damage to the test article. 
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Attachment 7 


Node Proof Pressure/Leak Rate Test Sequence 

Element Vestibule Combined 



-TIME*- 


A. Baseline Leak Rates 

B. Element Pressurization 
CL Powered Berth 

D. Vestibule Pressurization 


E. Pressure Stabilization 

F. Proof Pressure Cycle 

G. Data Review 

H. Seal Leak Rate Verification 
L Weld Leak Rate Verification 


Figure 24 - Node STA / Node 1 Proof Pressure / Leak Rate Test Sequence. 

Strain gages located across the Node STA and Node 1 pressure shell and on aluminum plates installed in 
both a radial and an axial hatch window provided stress distributions and internal loads at critical 
features such as areas of weld mismatch and endcone to cylinder interfaces. Deflection gages monitored 
overall displacement of both the pressure shell and the CBM rings. Subsequent post-proof NDE and 
helium leak testing of the welds confirmed the pressure and leakage integrity of the article. Since most 
of the ISS structures were tested in facilities without tight temperature controls, temperature- 
compensation of the strain gage readings had to be performed. While this induced error was small, this 
consideration cannot be overlooked when performing qualification testing for structures when tight 
math model correlation is required. All stated objectives of the Node 1 and Node STA proof pressure 
and leak test campaign were satisfied (Figure 25) [9]. 
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NODE STA PRIMARY STRUCTURE 
QUALIFICATION TESTS 


IHIXIIIUTKNM. 
BMfiEHTATttH ,, 


OBJECTIVES: 


Verify primary structure withstand exposure to proof pressure wllhout structural failure or 
excessive deformation (per S3P 41 f 72 Sec.4.4.4). 

Verify pressure toad bearing internal se«ir>dafy structure withstands application ef proof pressure 
to primary structure without structural failure or excessive daloimation. 

Verify redial porl/CBM ring interface deflections (ovality and planarity), 

Quality Match and CB-M ring to pressurized element seals contain element atmosphere after exposure 
of structure to proof pressure loads. 

Verily trial all structural welds contain element atmosphere after exposure of structure to proof 
pressure laarie (satisfy Fracture Control criteria per SSP aOSSflB). 

Validate acceptance of CBM'etement interlace seal leak rate measurement methodologies. 


TEST METHODOLOGY: 

Seal ah pressure shell jren stations with flight w fllght-lihe closeouts (bulkhead penetrations not 
machined until refurbishment}. 

Close one radial port and one axiat pert vestibule with FE1410 berthing mechanism 
simulators.'prcssuro domes. 

Pressurise node to 22 . B pslg and acquire structural dale. then reduce pressure 1o ambient. 

PressuriiU node to 14.7psig with a known mixture ol missile grade air and helium. 

Employ He mass spectrometer to qualify leak rate for Hatch eeal and CBIWetoment seal, and all 
structural wefds. 

X-ray i nspad ell welds after qualification test phase Is complete. 


Figure 25- Node STA Proof Pressure / Leak Rate Test Objectives. 

Following the proof pressure test program, the Node STA was moved to its static test fixture in Building 
4619 at MSFC where both pressure and mechanical loads could be applied simultaneously to complete 
the structural verification testing (Figure 26)[10]. Pressure domes were mounted over one axial port and 
one radial port. Load fixtures could apply bending loads to the axial port singularly and to two adjacent 
radial ports simultaneously, with one adjacent radial port containing the pressure dome and the other 
adjacent radial port remaining unpressurized. This test sequence was intended to exercise the Node STA 
structure to 1.05 times the combined (pressure + mechanical) loads. This test value was agreed upon 
based on the conservative envelope of the specified transient dynamic interface loads on the radial 
ports (Figure 27 - 29) [11]. 
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UNIVERSAL COMPONENTS 
REACTION STRUCTURE 





Figure 26 - Structural Test Fixture located in Building 4619 at MSFC. 


[ space >ur*ow^ 


Node STA 

Combined Loads Test Factor 


• Test Philosophy/Objectives 

• Perform combined loads testing 

• Ensure loading to limit load stresses without damaging structure 
(proto-flight test) 

• Test demonstrate model accuracy - model predicts structural 
margins and provides operational analysis capability 

• Position 

• Test to 1 .05 times combined limit loads (1.05 factor on both 
pressure and external loads) 

• Apply external loads simultaneously to two adjacent radial ports 


** >w i i 


Figure 27 - Rationale for Node STA Combined Loads Test Factor. 
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Node STA Combined Loads Test Factor 
Rationale 



* Pressure bounded operationally. Proof pressure accomplished 

* On orbit loads conservative (worst on worst combi nal ion) 

* Factor of 1 ,05: 

* Stresses critical features, including welds, above limit operational 
loads 

* Sufficient to demonstrate no design oversight 

* Sufficient to verify superposition 

* Test approach: 

* Demonstrates pod to port interaction 

* Exercises critical load paths 


Figure 28 - Rationale for Node STA combined loads test factor. 



Node STA Combined Loads Test Factor 
Precedence 


Hardware 

Test Factors 

External Tank teach flight unit) 

* 1 OS t<me« combined presort and michmlcai loads 
£ 5 combi n atiors) 

» Ulllmet# combined Load test on dedicated hardware 

Super light vm* gfil t&nk 

* S combi labon* pi ms 1.0 limes preaaurr and 1-1 5 
times median Cal 

arbiter 

*1.2 times mechanical 
* Cabin; t . 1 times pressure only 

SAB 

* 1 . OS limes pressure [each motor, each flight j 

* U'ltimftte co-Mbinod load case Of! (JediCAlsd hardware 

Hubble (designed lb safety faclOT) 

* 1.2 limes mechanical loads 

Sfllurn 

* 1 .05 timet pressure (proof test each tank) 

* Ultimate load* on dedicated hardware 

Skylab MU A & ATM 
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Figure 29 -Historical data supporting the rationale for the Node STA combined loads test factor. 
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Static Influence coefficient characterization testing was performed to exercise the ports prior to the 
actual static test campaign. Both the axial port and the two adjacent radial port 1.05 times combined 
(pressure + mechanical) loads test cases were completed successfully. The axial port combined loads 
case was also used to assure that the PMAs could be successfully delivered to orbit attached to both the 
forward and aft axial ports without buckling the Node endcones. In addition to the on-orbit loads 
testing, the static test fixture was used to certify the Node for launch loads in the Space Shuttle Orbiter. 
Multiple load cases exercised the four longeron and single keel trunnion to loads which enveloped the 
liftoff, landing, emergency landing and Orbiter-to-payload relative deflection load cases that the Node 1 
would be subjected to during launch. The Orbiter static load tests were to 1.2 x limit load. The Node 
structure was design to 1.25 x the design limit load on yield for Orbiter load cases so no detrimental 
permanent deformation was incurred during this testing. All static test cases for Orbiter-induced loads 
were successfully completed. A summary of the structural testing is provided in Figures 30 - 42 [12]. 
Node static test conditions 14 and 15 were deleted after detailed structural analysis showed that these 
conditions were not value-added (Figures 43 - 45) [13]. The global finite element model is shown in 
Figure 46[14]. 



Node STA Static Loads 
Test Readiness Review 

Overview of Test Conditions 
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Figure 30 - Overview of planned Nodes STA Static Test Campaign (Identifier # 14 - Rack Fitting and 
Identifier # 15 - Midbay Fitting were eventually deleted). 
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Node STA Static Loads 
Test Readiness Review 

Conditions 9A.B.&G. Endcone Stiffness 


Objective: Characterize the stiffness properties o f ihe endcone in support 
of dynamic analyses. 

Tested Structure: Aft Endcone 
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Figure 31- Condition 9A, B & C and Endcone Stiffness. 



Node STA Static Loads 
Test Readiness Review 

Conditi on 1, Primary Str ucture 


Objective: Apply combined maximum compression, forward cylinder 

torsion, and alt cylinder bending toads and create maximum X 
axis reaction at port primary trunnion 
Tesied Structures: Aft Trunnion System, Aft Cylinder. Torsional Stiffness 



Figure 32 - Condition 1, Aft Trunnion Loads and Torsional Stiffness. 





Node STA Static Loads 
Test Readiness Review 

Conditions, Forward Trunnion Roll 


Objective: Characterize the response of the secondary trunnion system to 
max a rial friction load combined with max times -phased vertical 
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Figure 33 - Condition 3, Forward Trunnion Roll. 
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Node STA Static Loads 
Test Readiness Review 

Gondii ion 2, Primary Structure 


Objective: Apply combined maximum forwa'o cylinder bending, aft cylinder 
torsion and yaw creaie maw mum Z-axis reaction at port 
secondary trunnion and max Y-axis reaction at the keel. Apply 
max PMA interface toads to the aft endcone. 


Tested Structures; Forward Trunnion, Keei, Aft Endcone 



Figure 34 - Condition 2, Forward Trunnion, Keel and Aft Endcone Loads. 
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Node STA Static Loads 
Test Readiness Review 

Condition 14. Rack Fitting 


Objective: Qu& dy the rack fitting (683-1 1 B41 ) and it J s interlace to the 
primary structure. 

Tested Structure: Hack Fitting* Mldring/Atl Cylinder Interlace 



Figure 35 - Condition 14, Rack Fitting Load Case (Subsequently Deleted). 




Node STA Static Loads 
Test Readiness Review 

Condition 1QA ± Radial Rod Influence Coefficient (MxL 


Objective: Characterize the radial port ay stem 

Tested Structures: Radial Pori Cylinder, Berthing Plate. Saddle WeW F and 
Internal Struts 
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Figure 36 - Condition 10A, Radial Port Influence Coefficient Test. 
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Node STA Static Loads 
Test Readiness Review 

l c pud if ion 106, Radial Pori I nfluence Coefficient (Vz} 


Objective Characterize the radial port system 

Tested Structures: Radial Port Cylinder, Berthing Plate, Saddle Weld, and 
Internal Simla 
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Figure 37 - Condition 10B, Radial Port Influence Coefficient Test. 




Node STA Static Loads 
Test Readiness Review 

Condition IOC, Radial Port Influen ce Coeffic ient (Myj 


Objective: Characterize the radial pod ayaienn 

Tasted Structures: RadJat Port Cylinder, Berthing Plate. Saddle Weld, and 
Internal Struts 
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Figure 38 - Condition 10C, Radial Port Influence Coefficient Test. 
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Node STA Static Loads 
Test Readiness Review 


Objective: Apply combined press jre a nd mechanical bads to characterize 
the toad path through the CBM/CBM interface and structurally 
qualify the CBM ring structures 
Tested Structure: ACSM. PCBM, CBM/PE Joint 
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Figure 39 - Condition 11A, CBM/CBM interface loads without pressure. 
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Node STA Static Loads 
Test Readiness Review 

Condition 11B, CBIWCBM Interface 


Objective: Apply combined pressure and mechanical loads ic Characterize 
the load path through the CBMrCBM interface and structurally 
qualify the CBM nng structures 
Tested Structure: ACBM, PCBM, CBM/PE Joint 



Figure 40 - Condition 11B, CBM/CBM Interface loads with pressure. 
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Node STA Static Loads 
Test Readiness Review 

Condition 12, Radial Port On -Orta 1 1 Loads 


Objective; Apply combined pressure and mechanical heads to structurally 
qualify ihe radial pod system to on-orbit loads (105% of design 
limit press u r o and loads) 

Tasted Structure- CBM, Radial Port System 
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Figure 41 - Condition 12, 1.05 times (pressure + mechanical) Radial Port Qualification Test. 
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Node STA Static Loads 
Test Readiness Review 

Condition 15, Midbay Fitting 


Objective: Qualify the Midbay fitting (683-11040) and It's interface to the 
primary structure. 

Tested Structure: Midbay Fitting, Midring/Ratfal Pori Cylinder Interface 
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Figure 42 - Condition 15, Midbay Fitting Test (subsequently deleted). 


29 




2-BH23-SGD-a*&97, RowiskrtA 
July 14 , 1997 

to: oa-Di ; 

cc: Conrad Ban JT-03 

Ken VafTlfir JT-03 
Paul gmifh JR-63 

Bub jrcf : Cancellation of Structural Testa for Node Internal Finings 

Request: 1 

Based on me hnal stress analysis. *1 is recommended lhat rtm Owl sialic baits 
planned for me Node internal fittings be canceled. Ralion^lg Snr mis nKgmmeixtiiinn 
is presented below. The onginal wquesl, daled June 13, 1997, did not inefcrie 
rntbi-ale loi che radial port internal splice bracket, 563-1 1 340. f'al ts now included 

Rational?: 

First, several of me Nod? inigm&l Firtir-v^s have simple, well defined, load palhs. Thu 
IS to say. p.ven tin* npplind leads , tfW loads n the htling and ils ptlachmanlfi can be 
determined ar.cura.mly with high DCnlidnncD. T L’sLr/j oT Ihcsu Fittings is not 
rgconnrngndgd, since bulh Ihu malarial and IhO bultrd joints Arfi lnsIOd SL'paniluly. 
Fittings Itial tail in Ibis caiegory are: 

1 . 563-1 1 335- 1 . Outbcerd Support Slrudure Fitting 

2. 563-1 1 333-1 r M*dbay Support Stnuctuw Fitting 

3. 563-1 1 339-1 . Rada! Pod Standoff Filling 

4. 663-1 1 330, Endcone Beam Bracket 

5. 663-1 1 337, Endoofie Ladder Bractoel 

Sncc*id, die Node infernal Fittings when are shown in me attached table have n none 
complkelcd load peHls. Each has a positive margin gF safoly using a safety laclor (it 
two and itiuE, w4 be quelifiad by snatysis only 

Resolution: 


John, it you and C. Nagy and B. HehOgnr agrao with Ihn abtfvfc proposal, please 
forward a letter of concurrence. We will be h,nppy to fax do™ Hne strew analysis for 
each titling end answer any ^jmlion* vie leleccn 


Krnmt Nord 
Rev A. 


Sim Davis 
Rejv. A 


Figure 43 - Memo justifying the cancellation of Node internal secondary structure testing. 
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TABLE 1. MODE INTERNAL FITTINGS MARGIN OF SAFETY SUMMARY 


p " 

De SC rip IKK’. 1 Location 

Failure Mode 

Margjn of Safety* 
Yield Ultimate 

rating 663-11840-3 

683-11840-3 

AC Bolt Holes 

Bearing 


+0.55 

“ 

At Longeron Attach Hole 

Tension/Shear 

+01S 

*0.11 


At Web Range 

Tension/B ending 

+□.04 

+D.09 

BAC83QUS5 

5/16" Bod, Brackel/ning 

Tension/ Shear 

*0.72 

*0-34 

NA&1291C5 

S/l6"Nut for Above; 

Sheer 

- 

*033 

603-11714 

Ring Web 

Roaring 

- 

+□.38 

BACB30U&4 

1M F Bolt. BktJLongcroft 

Tension/ Shear 

+0.20 

+0.0& 

NAS-1727 

IM'' Nut for Above 

Shear 

- 

+0.99 

603-11752 

Longeron 

Bearing 

* 

*0.08 


Fltllnge 003- 11 040-1 a -2 

€83-1 1B4Q-1-12 

At Boll Holes 

Bearing 

+0.12 

40.05 

* 

At Avionics Boarfi Lug 

Cnmfchied 

+0.28 

40.10 

- 

At Root of Lug 

Teneon/ Bending 

+0.2# 

+0.21 

* 

Al | qngerari Attach Mule 

Tension/Shear 

+0.25 

40.10 

- 

At Web Flange 

Tenaion/Bending 

-to.oe 

+0,01 

BACB30US4 

1/4' Balt, Gw /Longeron 

Tenaien/Shear 

40.46 

40.70 

NASI 72? 

1/4' NiJl tor Above 

Shear 


+0.95 

M3-1 tTK 

Lqngrwi 

Bea.-.ng 

1 

40.59 

BACB30US4 

1/4“ Bolt. BrackebRing 

Tenskx^Sheer 

+0.79 

+045 

NASI 291 

1/4' Nut lor Above 

Shear 


40.25 

603-11730 

Ring Web 

Beanng 

40.72 

40.77 


Factor of Safety: 2.D ioruNimale, 1.5 for yield 

(A laclor ol safety of 1 j5 Ib used for yield. rather than the required 1 .25. lo assure chat no 
yielding has occurred dunng proof pressure testing.} 


Figure 44 - Supporting data for cancellation of node internal secondary structure tests 


TABLE 1, NODE INTERNAL FITTINGS 
MARGIN OF SAFETY SUMMARY (Continued) 


Part 

DescnpborvL oca tton 



Failure Mkxle 

| Margin of Safely* 

1 YieM 

Ultimate 

Fitting 683-11841 

683-11841 

At Boll Holes 

Bearing 

• 

-0.06 


Al Lugs 

Tens*on/Shear 

+2 00 

♦ 1.34 


Al Web Range 

TensiorvBending 

*053 

-0.28 

BACB30US5 

5/16' Bo«, BrackcVRmg 

Tension/Shear 

-0 98 

-0.25 

NAS1291C5 

5/16' Nut for Above 

Shear 


-0.33 

11730 8 11224 

Ring Wobs 

Beanng 

-0 09 

40.12 

703 1 5-4 

14' Bolt, Bkt .Longeron 

Tension/Shear 

-0 38 

40.11 

NASI 727 

V Nut tor Above 

Shear 


4071 

683-11743 

Longeron 

Bearing 


40 02 

70315-5 

5/16" Bolt, BkURIng Ftg 

Tension/Shear 

+0.09 

40 01 

MS21209 

Helicoll. Rack Fitting 

Shear 


42.47 

11B32 8 11833 

Rack Attach Fittings 

Beanng 


40 98 


Filling 683-1 1834 

683-11834 

At Center Flange 

BencAng 

+2.51 

+2.31 


At Sde (Strut) Lug 

TensioiVShear 

4088 

40,70 

* 

At Bod Holes 

Beanng 


-285 

BACB30VW08-09D 

14' Blind Bolt. FtgLong. 

Shear 

+0 82 

+0.76 

683-11743 

Longeron 

B£fi!22 


+2.25 


Fitting 683- 11832 

683-11832 

KPWD6-2 

At Lug (FE Analysts) 

At Lug (Hand Analysis) 
Khar Bearing 

Tension 

Tension/Shear 

Compression 

+1.28 

+258 

♦0.87 

+1.89 

+1.09 


Fitting 683-1 1833 

683 11833 

At Base of Lug 

TenslorvBearing 

-0.62 

+0.33 


At Lug 

Tension/Shear 

♦7.9 

-64 

KPWD12-8 

Khar Beanng 

Compression 


+11.5 


Figure 45 - Supporting data for cancellation of node internal secondary structure tests 





SFLT Condition 2 TRR 
Node Global Finite Element Model 



Figure 46 - Node STA Global Finite Element Model. 


The Node 1 STA was then lifted from its static test fixture and moved to the adjacent Space Shuttle 
Payload Modal Test Bed in Building 4619 (Figures 47 [15] and 48 [16]. During this operation, the facility 
crane stalled, leaving the Node STA hanging twenty feet in the air over the modal test fixture. The crane 
was fixed the next morning and it was determined that this prolonged hang load did not cause any 
damage to the test article. For the modal test, a 3200 lb mass/c.g. simulator was attached to both the 
forward and aft axial ports of the Node STA to represent the PMAs which would be attached to the 
Node 1 for launch in the Orbiter. A full modal test campaign including sine sweep and driving-point 
impedance testing on one axial and one radial port was undertaken in order to provide a verified Craig- 
Bampton-reduced model to both the Shuttle Program for verification coupled loads analysis of the ride 
to orbit and to the ISS Program for incorporation into the integrated ISS dynamic model used for on- 
orbit loads development. Pre-test predictions for the launch configuration (Figure 49) [17] and the 
configuration of the Node berthed to the Orbiter Docking System (Figure 50) [18] were performed and 
correlated with the modal test results. An excellent detailed discussion of the modal testing of the ISS 
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elements is provided in the paper "Modal Testing of Seven Shuttle Cargo Elements for Space Station" by 
K. Kappus, T. Driskill and R. Parks [19]. 

Correlation between the mathematical stress model and the test results were generally within 10% for 
critical strain and deflection readings. Dynamic models provided for Shuttle Verification Loads Analysis 
were expected to include all cargo element modes up to 50 Hz and where significantly large Orbital 
Replacement Units (ORUs) contributed to the dynamic response of the cargo element, correlation of the 
dynamic response of these components could be required up to 70 Hz. Static and dynamic verification 
test plans and correlated math models were reviewed by the Shuttle Structures Working Group as well 
as the ISS Structures & Loads teams before the hardware would be considered certified to fly in the 
Orbiter payload bay or be verified as an element of the on-orbit ISS configuration. 



MVII Hit Ui p H TtST AlTTUIt %i i i Ip 

Figure 47 - Node STA with PMA mass simulators on each end installed in the Modal Test Bed. 
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FIG U RE 2,2.1 .1 JSA -1 MG DA L TEST BED 



Figure 48 - Schematic of Space Shuttle Modal Test Bed at MSFC. 


FIGURE 2.2.14,1-7 


FULL TEST ANALYSIS MODEL MODE 
SHAPE NUMBER 7. 18.75 Hi 



Figure 49 - Sample pre-test prediction of a mode shape for launch of the Node in the Orbiter with the 

two PMA's attached. 
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FIGURE 2. 4 .2-1 FIRST QDS STAGE MODE SHAPE 



Figure 50 - Sample pre-test prediction of a mode shape for the configuration of the Node with both 

PMA's attached mated to the ODS. 

A subsequent decision by the ISS Program to have Node 2 and Node 3 provided by Alenia Aerospozio 
obviated the need to refurbish the Node STA for flight. A new structural test campaign was required for 
Node 2/3 since this hardware would be a different structural configuration than Node 1. (The Node 2/3 
test campaign is described in a subsequent section.) Recently, there has been consideration to refurbish 
the Node STA for future launch to ISS. A feasibility study is underway to determine how this might be 
accomplished as the launch vehicle will not be the Space Shuttle. 

A critical issue to be addressed was the lack of full-scale acoustic testing on the USOS pressurized 
elements. During the ISS Program rebaselining activity, it was discovered that developing a full-scale, 
acoustic test capability near MSFC would be cost-prohibitive (Figure 51) [20]. Other acoustic test 
facilities existed, but the cost and schedule impacts for shipping the Node STA, Common Module STA 
and the Airlock protoflight article to a distant facility and performing the testing were also perceived to 
be excessive. All ISS elements were required to be certified to the 141 dB Overall Average Sound 
Pressure Level environment inside the Orbiter Payload Bay (Figure 52) [21], so a technically acceptable 
compromise had to be developed. 
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OP» B306 

Space Station Program 
Decision Package 

REV, a 

Page 1 of 2 

Developed By: John J. Zlpay 
iephone: (713) 244 - 7145 

Priority: | 1 Routine 

[ x 1 Expedite 

Oecislon Title. po _ 3 stfoc|urm | j #rt Simplifications 

Affects: (a ] MDA [ ] Rocketdyne ( ] NASA 

(x ) Boeing ( ] ESA ( ] 

Rationale tor Change: 

[ X ] Cost [ ] Make Operational 


Maintaining lllgfit and operational safaty ara the most important aspects of stnjctual tasting. This DOP 
reduces the scope of structural losting for the LAB / H AB. nodes, and unpressurized logistic canter 
(ULC). Wah/ers will be required. 


Analysls/Melhode: 


>f Cupola structural test simplifications 


Retain: Vibro-acoustic test on LAB M/OD shielding. 

Delete: Dry Cargo Carrier Static Loads Test (Use 1.25 factor of safety on yield. 2.0 on ultimate). 
Defer Lab, Hab and Node leak tests to acceptance tests. 
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Figure 51 - Decision Package deleting Lab module vibroacoustic test from the ISS Program baseline. 


36 



TABLE 2.2 .5.3-1 ORBITER CARGO BAY COMBI MED UFTOFRBOOST 

ACOUSTIC SPECTRUM 


Ocfsve Band 

Sound Pressure Level IdB] 

Cenlcf Frarfuency 
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UflDfl 
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Pjylaad Diannatar lflDlHO Inches 
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Figure 52 - Orbiter combined liftoff / boost acoustic spectrum from NSTS 21000-IDD-ISS. 

The certification approach finally taken for the ISS pressurized elements to the Orbiter acoustic 
environment was heavily leveraged on the Spacelab, Multi-Purpose Logistics Module (MPLM), Shuttle 
and Saturn acoustic test data. From these tests, internal random vibration environments were derived, 
providing the design criteria for internal rack mounted equipment within the USOS pressurized 
elements. (Reference: Boeing HSV Memo 2-8V63-BLE-033/99, "Airlock Vibroacoustic Environment 
Verification, 9/1/99 and Boeing Memo 270-400-97-100, "ISS PG-3 Random Vibration Environments", 
12/15/97.) For all externally-mounted equipment, component level acoustic or random vibration 
testing, as appropriate, was performed to assure that the hardware would not pose a catastrophic 
hazard to the Space Shuttle Orbiter during ascent. Examples of component level testing included an 
acoustic test of the Micro-Meteoroid/Orbital Debris (MM/OD) shielding and pressurized element 
common hatch as well as component random vibration tests of the U.S. Lab Window and Common 
Berthing Mechanism (CBM) components. 

Just prior to the launch of Node 1, the vendor that provided the ring forgings for the pressurized 
elements sent out a written notice that the temperature readings in the facility used to produce these 
forgings might not have been accurate. Therefore, the mechanical properties of the forgings might not 
have been per the vendor specification, invalidating the structural analysis and margins that had been 
calculated for the Node, Lab and Airlock primary structure. Fortunately, SSP 30233, "Space Station 
Requirements for Materials and Processes" required a first article cut-up of hardware delivered by the 
vendor to examine the overall condition of the forging as well as mechanical properties testing of tabs 
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from each forging produced (Figure 53)[22]. An "A"-basis allowable based on the mechanical properties 
derived from the tabs were used in the structural analysis of the pressurized elements, so a potentially 
serious structural integrity issue with the hardware was averted (Figures 54 - 57) [23]. An example of 
the instrumentation used to predicted stresses in critical areas of the Node 1 aft ring is shown in Figure 
58[24]. 



Figure 53 - Excerpt from Node 1 Stress Analysis showing requirements to extract samples from the 
forgings used to produce the circumferential rings on the Node, Lab and Airlock. 
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AVERAGES FROM QUALIFICATION TEST RINGS (KSl ): 


TANGENTIAL 

AXIAL 

RADIAL 


UTS VS » 

63.1 M.J IS 

S 6.7 52.1 13 

«.5 5 Z.S IB 


5D|lFISnf5| 


2.4^4 
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94195 ALLOWABLES [A-0ASIS] FOR QUALIFICATION TEST RINGS 
IKSIJ: 


TANGENTIAL 

AXIAL 

RADIAL 


UTS 

63.4 

5-H.5 


IN-16, K-i. 37] 


HOWEVER, DATA FROM SIN 23 1ST ARTICLE CUT-UP 
INDICATES THAT THE FORGING CROSS-SECTION HAS 
LOWER PROPERTIES THAN THE QUALIFICATION TEST 
RING IAS EXPECTED} 



Figure 54 - Mechanical properties data from the samples extracted from 18 ring forgings provided for 

used in the ISS pressurized elements. 
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Figure 55 - First-article cut-up data indicating a knockdown factor on the forging tab data is required. 
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Figure 56 - Recommended A-basis allowables for ring forgings. 
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Figure 57 - Recommended A-basis allowable vs. forging tab data for Node 1 and Node STA rings. 
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Aft Ring Qual Test Predictions 




Figure 58 - Example of instrumentation used to verify stress distribution in the Node STA aft ring. 

A discussion of the unique structural verification activities directly pertaining to the Common Berthing 
Mechanism (CBM) is warranted. The CBM was designed, assembled and qualified by Boeing-Huntsville. 

It consists of both an active half and a passive half that is attached to each non-Russian pressurized 
element of the ISS. The interfaces between the CBM and each pressurized element were specified in a 
CBM to Pressurized Element Interface Control Document. Small differences in the vestibule 
configuration for the various elements often drove some unique features at each interface, but the 
structural load path between both halves of the CBM and between the CBM and the pressurized 
element was tightly controlled and required rigorous analysis. 

A detailed solid-element finite element model was developed for both the active and passive halves of 
the CBM. These models were integrated with finite element models of each pressurized element 
endcone. Where the two individual elements were mated via CBM, the integrated models of the active 
and passive CBM/module endcones were joined and the required on-orbit mechanical loads, pressure 
loads and thermal loads were applied across the integrated finite element models. In addition, detailed 
finite element models of the flanges for both sides of the on-orbit interface were used to evaluate their 
deformation under pressure loads prior to mating, during the mating operation when bolt-up loads 
were applied and after mating. This assured that the required interface ovality and planarity was 
maintained and that sufficient load would be applied around the circumference of the interface flange 
to form a pressure seal across the three o-rings in the passive CBM seal assembly. The CBM was certified 
to fully withstand the on-orbit mated interface loads combined with pressure, including a condition 
where with one of the 15 motorized bolts would not be engaged. It was also certified to withstand the 
on-orbit mechanical loads (without pressure) for two adjacent bolts not engaged. 
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The CBM was certified for pressure and on-orbit thermally-induced loads combined with flange 
deflections in the Assembly Level Qualification Test program at MSFC. This rig was located at MSFC and 
was a full thermal-vacuum qualification test set-up where both halves of the CBM interface were 
brought together to certify the contact dynamics models, the 16 motorized bolts were engaged and 
disengaged multiple times, the vestibule was pressurized, both the Shuttle Remote Manipulator System 
(SRMS) and the Space Station Remote Manipulator System (SSRMS) dynamic responses were simulated 
and man-in-the loop testing was performed. This rig was essential for the certification of the CBM for 
both the on-orbit mating operation and structural integrity. 

The "Unity" Node with PMAs 1 and 2 attached to it was launched on STS-88 on December 4, 1998 and 
successfully mated to the FGB on December 6, 1998. 

During the first ingress, it was noted that the axial port hatch, when opened, did not travel all of the way 
up its tracks (Figure 59) [25]. One small detail was missed during Node proof pressure testing and hatch 
installation. The pressure deflections of the Node endcone could close the existing gap between the 
hatch rollers and the hatch track causing the hatch to bind in an intermediate position (Figure 60) [26]. 
After some review of the pressure test data for all of the USOS modules and some tolerance analysis of 
the hatch and track assembly, a simple modification was made to all axial port hatch rollers still on the 
ground and the next ISS crew performed this modification on-orbit for the Node 1 hatches to alleviate 
the problem (Figures 61 and 62)[27]. 

After three successful EVAs as well as IVA activities inside the nascent space complex, the "Unity" and 
"Zarya" were activated to form the core of the ISS. 
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FLIGHT 2A.1 NODE! HATCH INSPECTION AND ADJUSTMENT 
RadiaL/Axial Port Track Comparison 




Figure 59 - Figure showing axial and radial port hatch configurations for Node 1. 



FLIGHT 2A.I NODE I HATCH INSPECTION AND ADJUSTMENT 
US Axial Port Track Deflections at 15 psi 



Figure 60 - Pressure-induced deflection interference between rollers and hatch tracks. 
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FUGHT 2A A NODE1 HATCH INSPECTION AND ADJUSTMENT 
Roller Adjustment Details 




Figure 61 - Axial hatch roller details. 


0 FLIGHT 2A.I NODEI HATCH INSPECTION AND ADJUSTMENT 
Roller Adjustment Details 



Figure 62 - Axial hatch roller adjustment procedure. 
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" Destiny" Laboratory 


The Common Module STA was intended to be used to certify the U.S. "Destiny" Laboratory flight article 
structure and then it was to be refurbished into a Habitation module to be launched to ISS on a later 
flight. The Common Module STA had holes for two windows rather than the one window on the U.S. 
Lab, but in all other ways was identical in construction to the U.S. Lab. Like the Node, it was constructed 
of Aluminum 2219 and only the skin panels were stretched isogrid (Figure 63). VPPA welding was also 
used to weld the skin sections to one another and to the circumferential ring forgings. The Common 
Module STA structural verification test campaign included a proof pressure test with 100% X-ray and 
ultrasonic NDE on the welds both pre- and post-proof testing, a post-proof leak test of the welds, a 
modal test and a static test. The Lab Flight Article structural verification included a proof pressure test as 
well as a detailed verification campaign on the 20" fused silica window to satisfy the requirements of 
SSP 30560. 



Figure 63 - U.S. "Destiny" Laboratory being lowered into KSC vacuum chamber for element leak 
testing (Isogrid skin panels and nadir window installation are visible). 
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The proof pressure test to 1.5 times the MDP was completed successfully on the Common Module STA. 
Since the Common Module STA and the Lab Module Flight Article did not have any radial ports, it did not 
experience the gusset yielding and creep that occurred on both the Node STA and Node 1 Flight Article 
(Figure 64) [28]. Subsequent to the proof test, leak testing on the welds and seals was successfully 
performed (Figure 65) [29]. 


The modal test of the Common Module STA was performed at MSFC using the Space Shuttle Payload 
Bay Modal Test Bed at MSFC and included runs with and without a PMA mass simulator on the forward 
axial port to provide the dynamic characteristics of the module endcone (Figure 66) [30]. The endcone 
secondary structure was installed in both of the Common Module's endcones and one mass-loaded rack 
standoff structure that was six bays long was also installed. Pre-test modal analysis of this configuration 
showed that it was sufficient to exercise the Common Module structure to develop the mode shapes in 
the frequency ranges of interest for both Shuttle and ISS dynamic model validation. Until Node 2 was 
launched, the Orbiter docked to the PMA on the axial port of the Lab, so dynamic characterization of 
this interface was require for mated, on-orbit loads development (Figure 67). A detailed modal survey 
and sine sweep including dedicated measurements of the driving point impedance on the mass loaded 
axial port were performed. Also, a rudimentary internal reverberation acoustic test to provide some 
data for the internal acoustic environment was conducted (Figures 68 and 69)[31]. While the intent of 
this acoustic testing was to support the development of a Statistical Energy Analysis (SEA) model, this 
model was not built and a mass scaling analysis of the MPLM vibroacoustic test data was used instead to 
provide vibration environments for rack-mounted internal equipment. 
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Figure 64 - Common Module STA proof pressure and leak test sequence. 
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Lab/CM STA Presure & Leak Test 

Leak Check Activities 


* Flight Seals 

- Lab window 

- Hatch 

* Perimeter seal 
Window 

- Feedthroughs 

* Primary Structure Welds 



Lab/CM STA Presure 8 * Leak Test 

Flight Seals Leak Test 


* Flight Seals Leak Check Procedure 

- Install helium containment enclosures around joints under test 

- Evacuate volume between seals wilh Mesa Spectrometer Leak 
Oetoctor (MSLO) 

- Calibrate system with standard leak at leak check pod 1 SO 
deg from MSLD 

— Inject Helium into Helium containment enclosures 

- Failure criteria defined in TClF-714 


Figure 65 - Welds and seal leak testing of the Common Module STA. 
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Figure 66 - Sample of the modal analysis of the Lab modal test configuration. 



Figure 67 - Space Shuttle Orbiter attached to PMA-2 at the forward axial port of the U.S. "Destiny" 

laboratory. 
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Figure 68 - Internal vibroacoustic setup for the Common Module STA. 
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IHTeRU*T13SAl 
SPACE STATION 

N A 1 


CM Modal Survey & Vibroacoustic 
Test Readiness Review 


Pre-Test Analysis Status 


* Preliminary SEA Model contains primary structure 

- Additional model data from Wyle tests in October (TLJ 

* Partial SEA vibration model of DASHA Rack completed & correlated 

* PSD data reduction program 4 pre-analysis used tor Rack correlation 

• Spirt & name input data files in Universal format #58. 

* Acceleration PSD (narrow band to 1/3 octave) 

- Envelope responses 

- Normalize data to launch 141 dB 

- Compute input power from force/acceleration Transfer Function 

- Compute substructure Transfer Functions 

- Compute SEA Coupling Loss Factors (CLF) 

* Analysis of structure response levels shows no fatigue life issues due to 
acoustic excitation 

* Test procedure reviewed & approved by NASA MSFC test personnel 

* Vibroacoustic shaker locations defined 

I _ . 


Figure 69 - Analysis plan for confirming the applicability of internal Spacelab random vibration 
environments to the "Destiny" Laboratory. 

Due to the delays in the Node structural verification test campaign, a decision was made to duplicate 
the Static Test Fixture at MSFC at the Boeing-Seattle's, Everett, Washington test facility and ship the 
Common Module STA there for static testing. This test campaign included several load cases to exercise 
the trunnions and keel to the enveloping Orbiter loads environments. These tests included several cases 
which exercised the Common Module STA trunnions and pressure shell structure to 1.2 x design limit 
load and an Orbiter longeron to Common Module STA trunnion relative deflection case. Some of the 
finite element models used in the Common Module structural analysis are shown in Figures 70 through 
74 [32]. Stresses due to weld mismatch on the STA pressure shell were also characterized (Figure 75) 
[33]. 

The Common Module STA test series also included a test case of the rack internal fittings, where the 
internal longeron was loaded in the short transverse direction (Figure 76) [34]. Static tests to 1.5 x limit 
load of the Module-To-Truss Structure interfaces on the Lab pressure shell were performed. A test of 
the Power Data Grapple Fixture (PDGF) mounting structure to the loads induced during the Lab's 
extraction from the Orbiter payload bay and attachment to ISS was also part of the test series. 


50 





In planning for the PDGF mounting structure static test, it was found that the PDGF support structure 
was significantly under-designed. The hardware was redesigned, the grapple fixture interface was 
successfully tested to 1.5 x limit load and the rest of the static test program was completed successfully. 
The Common Module STA was returned to Huntsville, Alabama where it is currently being used as part 
of an Advanced Environmental Control and Life Support System (ECLSS) test bed. 



Figure 70- Low-fidelity Finite element model of the Common Module STA. 
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• Total DOF -134,000 

• Linear Plate Elements 

• Test Loads Analysis 

• Sensitivity Analysis for Sub-models 
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Figure 71 - High-fidelity finite element model of Common Module STA used for static test correlation. 


(5) Aft Ring Web @ Trunnion - FEM 


• Total DOF = 76000 

• Linear Plate Elements 

• Trunnion Fitting Connected to Ring by Cbeam Elements 




Figure 72 - Detailed model used to evaluate the Common Module STA Aft Ring. 
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(1) Fwd/ Aft Rings 
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Figure 73 - FEM cross-section showing displacement of the CM STA aft ring and cylinder skin under 

pressure loads. 



(7) External Longeron Lateral Stability 


• Lateral Buckling Mode shape 



Figure 74 - Detailed model used to evaluate Common Module STA external longeron stability. 
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TT.flla (UegiM!-) 


Ring Weld Bending El 



Figure 75 - Stresses in Forward and Aft Ring Girth and Bulkhead Welds for the CM STA with weld 

mismatch included. 


The Lab Flight Article structure underwent proof pressure testing at Huntsville, Alabama to 1.5 times 
MDP. Pre- and post-proof NDE on all of the welds and post-proof leak testing of all of the welds was 
performed on the element (Figure 77) [35]. A few, slightly loose, dummy feedthroughs on the Lab Flight 
Article produced a blowing, whistling leak during the proof pressure test, but the facility air supply was 
able to maintain the internal pressure and there was no damage to the hardware. It was also the test 
article in which the 20" diameter, redundant-paned, fused silica window was certified for pressure. The 
requirements for window certification were documented in SSP 30560. These included detailed 
requirements for window verification including no glass to metal contact at 2.0 x MDP, the ability to 
safely change-out a window on-orbit, the need to verify the stress field in each window pane and the 
redundancy of each window pane under internal pressure loads. 
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(9) Longeron Bearing - Rack Attachment 



Fitting 

(9) Rack Interface Loads 


Llftofl- Interface Limit Loads, lbs 


Rack 
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Upper 
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Figure 76 - Rack interface loads at rack attachments to the Common Module STA. 
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Figure 77 - Lab Flight Article Proof Pressure / Leak Test Sequence. 

As part of the Lab Flight Article's structural test campaign, a specific series of tests was performed to 
verify the structural performance of the 20" window assembly (Figure 78). The window consists of 
redundant pressure panes protected by an external debris pane and an internal scratch pane (Figure 79) 
[36] making a total of four panes in the stack. 

Since aluminum has the same elastic modulus as fused silica glass, aluminum plates of the same 
thickness as the glass panes were substituted for the two glass panes in the window frame and installed 
in the Lab Flight Article. These plates were instrumented during the proof pressure test and strain 
readings were recorded. Deflection gages were also located around the frame to characterize the 
deflection of the window assembly. 

After this testing was completed, the aluminum plates that represented the window panes were 
alternately removed and the module tested at MDP to assure that the loss of one window pane would 
not compromise the integrity of the window assembly. An internal pressure cover was placed over the 
window assembly to assure the window could be covered should one of the panes become damaged. 
Finally, the entire window assembly was removed and an external cover was placed on the exterior of 
the module and the module was tested to assure pressure and structural integrity of the external cover 
and to show that a window could be changed-out effectively on-orbit (Figures 80 through 83)[37]. This 
testing and the subsequent correlation and extrapolation of the window stress analysis to 2.0 times 
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MDP confirmed that the 20"-diameter window would be safe for what was the then-projected to be a 
15-year life of the ISS (Figures 84 and 85) [38]. 

A redundancy test of the 20" redundant pressure pane assembly as also performed. For this test, a full 
20 " window lab assembly test article with both fused silica panes included was pressurized on one side 
to 15.2 psid and a weighted stylus was dropped on the outer, redundant pressure pane. This test had to 
be performed twice, because on the first attempt to shatter the redundant pane, the stylus damaged 
the window but did not shatter it. The second attempt used a heavier stylus dropped from a greater 
height. This completely shattered the redundant pane while the primary pressure pane retained its 
structural and pressure integrity. 

Since glass is subject to static fatigue, a fleet leader window of identical construction as the Lab 20 " 
window was built and has been under 15.2 psid pressure at the NASA-Lyndon B. Johnson Space Center's 
Structures Test Lab since the year 2000 (Figure 86 and 87). It is periodically inspected for flaws and leak 
tested. The fleet leader window has remained in excellent condition while the U.S. Lab window is 
periodically inspected on-orbit for flaws. As described above, the debris pane which covers the exterior 
of the Lab window and the scratch pane which covers the interior of the Lab window are present on- 
orbit to prevent incidental damage to the redundant pressure panes from micro-meteoroids and orbital 
debris as well as crew-induced damage. The only maintenance activity that has had to be performed on 
the Lab window on-orbit to-date involved replacing a leaking flex hose that is used to keep the cavity 
between the two panes at vacuum. The flex hose was inadvertently damaged and was replaced on-orbit. 
A protective cover was installed over the flex hose to prevent any reoccurrence of this problem. 


Figure 78 - "Destiny" Laboratory 20" diameter nadir-facing windows with flex hose cover installed. 
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FIGURE 6; CrusS-Settional View ufTypitaL WJihJuw IfiL^LaU^ciOtL 


Figure 79 - Cross-sectional view of the "Destiny" laboratory 20" window installation. 



FIGURE 7: Window Confipralion lot Loud Cue L Proof Ftosuie 


Figure 80 - Proof Pressure nadir window configurations with and without external panes. 
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FIGURE 8; Window ConFjsoration for UradC&fie HA, Limil Pressure 


Figure 81 - Nadir window limit pressure test cases on the redundant pane and the internal pressure 

cover. 






FIGURE 9: Window ('cinfigiir^Dit fix IxjmJ Ciic EB. Limil Ftcllure 

Figure 82 - Nadir window limit pressure testing with internal and external covers installed. 
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FIGURE 10; WliriowOpdfeurtriwpnf^lj^CMilL 


Figure 83 - Nadir window limit pressure tests on the redundant pane and the external pressure cover. 



FIGURE 3: 


Solid Element FEM t Typical Module Window Installation 


Figure 84 - Solid FEM of the nadir window installation. 
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FIGURE 3; Cmss-Sccticm of Solid Elecnent FEM, Window [nstuLlaiipoi 


Figure 85 - Cross-section of nadir window installation FEM. 



Figure 86 - Fleet leader window test article currently residing in the Building 13 Structures Test Lab at 

NASA-JSC. 
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Figure 87 - Close-up of Lab window fleet leader test article glass panes. 


A discussion of the pressure wall thickness for the Lab module is appropriate at this point. The pressure 
wall thickness for the cylindrical section of the Lab and Airlock (and subsequently extended to the JEM 
module, Columbus Module and MPLM), was determined not by pressure or mechanical loads, but by 
risk mitigation of the potential for catastrophic failure of the pressure shell in the event of a penetration 
by MM/OD (called "unzipping"). 

Unzipping was assessed by determining the critical crack length of the Lab module pressure shell over a 
range of pressure wall thicknesses. Using the probabilistic model of the orbital debris environment, 
analysts determined that an increase in thickness from 1/8" to 3/16" would increase the critical crack 
length by 50% and significantly reduce the probability of catastrophic failure of the module structure 
due to an MM/OD penetration. (The Node pressure wall thickness was well above 3/16" due to the 
radial port penetrations.) A decision package to increase the Lab module wall thickness was approved by 
the ISS Program (Figure 87) [39]. Similar assessments on other modules were conducted after the 
decision package was approved. The Airlock design used a minimum 3/16" pressure wall thickness as did 
the JEM, MPLM and Columbus Modules. 
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DP# OS- 7 

Space Station Program 
Decision Package 

Page 1 of 2 

Developed By: K.Nagy 
, Telephone: 713-244-7176 

Priority: j J Routine 

l~~%Expedile 

j Decision Title: Hab/Lab module wall thickness for MM/OD protection 


^emodula wall thickness for (ho US Hab and Lab modules is currently .155 inches. This wait Sickness was established 
during the Space Station Freedom design, using a ’Whipple" typo MM/OD shield design for 23 .5* inclination. To provide 
adequate shielding Tor the new msteroid and orbital debris environments at 51. 6’, it is proposed that the module wall 
thickness be increased to 3/1 S inches. The manufacturing ot the module structure is o n hold ponding a decision on the 
module skin thickness . A (imety decision is needed lo enable resumption of module manufacture. 


A nai y s i &/M e thods. : 

Analysis was performed, using BUMPER and the new MM/OD environment at 51 S° for 10 years from first flight, 
considering an element lor the US modules using 1/8 and 3/16 inch module wait thickness The analysis was 
performed using a 'stuffed - Whipple type shield, where bile mediate layers ot shielding material are placed 
between the module wall and the outer MM/OD bumper. Please see attached charts for additional informalion. 


Results: 

The analysis indicates, that the US Lab module wall ihFckness of 3/1 6 inch and US Hab module wall thickness 
of 3/16 inch would rasuN in Increased crew safety by increasing lhe critical crack length by 50% and reducing the 
probability of the module unzipping. 

Increasing module wail thickness lo 3/16 inch results in maximum gain in crew safety for minim um weigh: Increase 
1 (-900 lbs.). 

| Description of Required Action: (Continue on additional pages as necessary) 

Current Baseline: 

1/8 inch Lab and Hab models wall thickness 


Change To: 

3/1 S inch Lab and Hab module wall thickness. 


. .v u nt n i ■ zdLvCKi-X .n asa 1 rini/y : t ii. i.uu 


Figure 87 - Decision Package increasing the ISS Lab Module pressure wall thickness. 
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The "Destiny" laboratory was launched on February 7, 2001 and mated to the "Unity" Node on February 
10 th . After three spacewalks and some IVA activities, the Lab was activated and remains the centerpiece 
of the USOS. 


"Quest" Airlock. High Pressure Gas Tank (HPGT) ORUs 

The "Quest" Airlock was a unique ISS pressurized element structure in that there was no dedicated 
structural test article. It consisted of two compartments - a Crew Lock (CL) and an Equipment Lock (EL). 
The CL was manufactured by Rockwell International Corporation in Downey, California, and was derived 
from an Orbiter external airlock structure including a D-hatch (but no window) from which two 
spacewalking astronauts could egress the ISS. The EL was manufactured by The Boeing Company in 
Huntsville, Alabama and consisted of a cylindrical section of Aluminum 2219, isogrid skin panels and ring 
forgings between two endcones. The Crew Lock was attached to the CBM ring on one Equipment Lock 
endcone by a transition structure. A passive CBM and hatch was installed on the other endcone of the 
Equipment Lock in order to attach to a Node 1 radial port (Figures 88 through 91)[40]. 




Airlock Structures CDR 
Equipment Lock Primary Structure 
Flight Article, 683-52140-1 



Equipment Lock 

- FCBM 

- Common Hatch 

- Primary Structure 

» Many existing, parts 
used 

» Most A/L unique 
hardware based on 
existing concepts 

Crewlock 

- Provided by Rockwell 

- Shuttle EVA Hatch 

- Interface controlled by 
Boeing 

* “PCBM-like" 

interface flange 

50 


Figure 88 - "Quest" Airlock primary structure. 
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Figure 89 - "Quest" Airlock on-orbit configuration showing 4 High Pressure Gas tanks installed. 


Crewlock General Assy. - V829-000003 



^ Rockwell tern** 

Space Systems Division 


Figure 90 - Crewlock primary structure. 



Transition Adapter l/F - Cross Section 



Figure 91 - Transition adapter between the Equipment Lock and the Crewlock. 

Structural testing of the Airlock included a proof pressure test campaign where the Equipment Lock was 
proof-pressure tested to 22.8 psid with a hatch installed at the EL/CL interface while the Crewlock 
remained at atmospheric pressure. Then, a pressure equalization valve between the two compartments 
was opened and the internal pressure in both sections of the Airlock reached 22.8 psid. NDE of the 
Equipment Lock occurred both pre- and post-proof testing in addition to a post-proof weld leak test. 
(The Crew Lock had been separately proof pressure tested and the welds inspected prior to delivery to 
Boeing.) Bonded doublers, similar to those used on the Orbiter Crew Module, were used to strengthen 
several weld mismatch areas on the Crew Lock. This proof pressure test was successful and was 
instrumental in determining the integrity of the factory weld repairs on the Crew Lock. 

The launch configuration of the Airlock is worth discussing since it differed from the on-orbit 
configuration in a significant way. Only one ISS Common Hatch was launched with the Airlock in order to 
save weight. This hatch was at the Equipment Lock axial port and it held the internal pressure in the 
combined Equipment Lock/Crew Lock volume during launch. After attachment to the ISS, this hatch was 
moved by the ISS crew onto the opposite endcone between the Equipment Lock and Crew Lock. The 
hatch was closed and subsequently successfully leak tested during that flight. This operation saved 
approximately 600 pounds of launch weight since only one internal hatch had to be launched with the 
Airlock. 
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Static testing of the Airlock was successfully completed in Building 4619. A table of static test conditions 
performed is provided in Figure 92 [41]. Testing was in accordance with the protoflight structure 
requirements of NSTS 14046 (1.2 x limit load for Orbiter load conditions). The airlock structure was 
designed to a minimum structural factor of safety of 1.25 on yield and 1.4 on ultimate for these load 
conditions (Figure 93) [42]. On-orbit loads testing of the CBM interface was not performed because 
previous load testing on the Node CBM enveloped the Airlock to Node interface loads. The test 
campaign included a maximum bending test for the Equipment Lock to Crew Lock interface (Figures 94 
through 97) [43] because endcone buckling of the Equipment Lock at the Crew Lock interface was 
difficult to predict analytically due to the large empirical knockdown factors applied to analytical 
predictions for shell buckling. Figures 98 through 100 [44] show the type and location of 
instrumentation needed to characterize the effect of bending moment on the equipment lock endcone. 



Overview of Test Conditions 


Sequence 

Identifier 

Description 

1 

12 

Torsion/Bending Influence Coefficient 

2 

13 

Axial Influence Coefficient 

3 

2 

Endcone Buckling Test 

4 

1 


5 

3 

Keel Rollover 

6 

4 

Aft ETSD Fitting Test (S Transition Adapter) 

7 

5 

Forward ETSD Fitting Test (© end of Crewlock) 

8 

.7 

Grapple Fitting Test • 

9 

10 

internal Rack Fitting Test 

10 

11 

Internal Standoff Fitting Test 
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Figure 92 - Summary table of test conditions for the "Quest" Airlock primary structure. 
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Figure 93 - Airlock Configuration for static loads testing. 
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Airlock SFL Test Condition 2 
Test Objectives 


I SallM 1 1 I 
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Figure 94 - Airlock Static Test Condition 2 Configuration. 

Airlock SFL Test Condition 2 
Test Objectives 

* Hardware tested: Crewlock structure, crew lock to equipment lock 
bolted joint interface and Airlock forward bulkhead. 

* Test Objectives: 

- Protof light test Crewlock for critical enveloped liftoff/landing section 
loads. 

- Protoflight test Crewlock to Equipment Lock bolted joint interface 
for critical enveloped liftoff/landing section bads. 

- Proioflight test Airlock forward bulkhead critical enveloped 
liftoff/landing buckling loads. 
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Figure 95 - Airlock Static Test Condition 2 Objectives. 
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Condition 2 Endcone Buckling 
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* Objective: Apply loads to the end of the crewlock in order to generate 
shear/bending/torsion loads at the forward endcone of the Equipment 
Lock 

* Tested Structure: Forward Endcono, Equipment Lock 
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Figure 96 - Airlock Static Test Condition 2 loads. 



Airlock SFL Test Condition 2 
CL/EQ Interface Loads 


* * reduced to minimize 
moment overshoot 

** - Mas Design Loads 
are enveloped 
liflofElanding 
critical design loads 


Load Component 

Mas Design** 

Max Test 

Axial (X) 

144(H) lb 

17280 lb 

Shear (V) 

5900 lb 

4963 lb * 

Shear (Z) 

-12900 lb 

-10400 lb * 

Torsion (X) 

158800 in-lb 

177959 in-lb 

Y Moment 

-731300 in-lb 

-1060800 iti-il 

Z Moment 

-463200 in-lb | 

-555840 in-lb 


Load components are defined in the Airlock coordinate system 
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Figure 97 - Airlock Test Condition 2 Crewlock/Equipment lock interface loads. 
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Airlock SFL Test Condition 2 
Pretest Predictions 


* The areas of interest for test condition 2 are the crewlock to equipment 
lock batted Joint interface, the crewlock shell structure, and the Airlock 
forward bulkhead. 

* A total of 302 strain gages and 50 EDI'S are installed and will be active 
during all the static flight loads testing to ensure the structural integrity 
of the Airlock. 

* J ncl uded are the pretest predictions for test condition 2 and an 
instrumentation overview for the areas of interest for test condition 2. 




Airlock SFL TRR 




Figure 98 - Airlock Static Test Condition 2 instrumentation 



Airlock SFL Test Condition 2 
Pretest Predictions 
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Figure 99 - EDI locations for Airlock Test Condition 2. 
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Figure 100 - Strain gage locations for Airlock Test Condition 2. 

Influence coefficient tests of the trunnion system were significantly important for the Airlock 
certification due to their minimal spread (Figures 101 - 105) [45]. Influence coefficient tests are 
primarily used to exercise a structure along a single axis to loads much lower than the certification test 
loads to assure that the pre-test analytical predictions of load distribution through the structure are 
accurate. These influence coefficient tests verify the stiffness in the local region of the longeron 
trunnions and provided the data required to show that the Orbiter launch and landing load cases would 
not damage the protoflight Airlock structure. 



Figure 101 - "Quest" Airlock Trunnion System Configuration. 
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Test Condition 12 
Trunnion Z-direction Influence 
Cofiffir.ifint Stiffness Test 

• Test loads applied at the end of the crewlock to produce the z-direction 
reactions at the primary and secondary trunnions. 

• EDI displacements will be recorded at the trunnions and used to 
calculate the z-direction stiffness of the test support structure at the 
trunnion interfaces. 

• Calculated test support structure stiffnesses will be incorporated into 
the SFL analytical FEM’s to replicate test support structure boundary 
conditions. 

• Strain data will be recorded and compared to the analytical predictions 
from the FEM’s to ensure the z-direction model stiffness is valid. 



10f1 7/97 
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Figure 102 - Airlock Trunnion Z-direction Influence Coefficient Stiffness Test Objectives. 
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Test Condition 12 
Trunnion Z-direction Influence 
Coefficient Stiffness Test 


T^t Condition 12 rrinuur/Sectm da Ty Trunnion Z-Dirwifon Reaction Loads 
Fi« -13HQ0 
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Figure 103 - Airlock Trunnion Z-direction Influence Coefficient Stiffness Test Objectives. 
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Airlock SFL Test Condition 13 
Trunnion X-direction Influence 
Coefficient Stiffness Test 


* Test loads applied at the 4 compression fittings on the forward 
bulkhead to produce a 10 kip x-dJmction reaction at the primary 
trunnions. 

* EDI displacements will be recorded at the primary trunnions and used 
to calculate the x-dinection stiffness of the test support structure at the 
trunnion interfaces. 

* Calculated test support structure stiffnesses wilt be incorporated into 
the SFL analytical FEM's to replicate test support structure boundary 
conditions. 

> Strain data will be recorded and compared to the analytical predictions 
from the FEM's to ensure the x-direction model stiffness is valid. 
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Figure 104 - Airlock Trunnion X-direction Influence Coefficient Stiffness Test Objectives. 




Airlock SFL Test Condition 13 
Trunnion X-direction Influence 
Coefficient Stiffness Test 


aX-Direction Reaction Loads 



Figure 105 -Airlock Trunnion X-direction Influence Coefficient Stiffness Test Objectives. 

After the influence coefficient tests were performed, several other tests on the airlock were completed 
including, a grapple fixture support structure test, internal rack fitting tests, and a keel rollover test to 
assure that the allowable travel inside the orbiter trunnion fitting was not exceeded due to the minimal 
spread of the longeron trunnions were also performed. Since a pair of large tool boxes for EVA 
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equipment was launched attached to the Crewlock, the interfaces for these tool boxes also had to be 
static tested as well (Figure 106) [46]. 
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Test Condition 3 - Fitting “C” 
Revised Loads Configuration 


• Objective: Apply loads to the toolbox 
structure in order to envelope the 
Landing loads at fitting location “C". 



Figure 106 - ESTD toolbox test configuration on the "Quest" Airlock. 


Perfection is elusive in all manufacturing operations and it became necessary for the ISS Structures 
Team to assess discrepancies with the Airlock structure. There were a pair of misdrilled holes at the 
primary trunnion interfaces (Figures 107 - 109) [47] that had to be analyzed and dispositioned (Figures 
110-111) [48]. There were occasional manufacturing discrepancies on the elements of the ISS structure, 
but these were the exception and all were dispositioned without significant rework being required. 


Structural analysis is typically performed on the as-built structure when conditions warrant, so a revision 
to the fracture analysis, the fail-safe analysis and structural margin calculations for the Airlock primary 
trunnion fittings for a fewer number of holes was performed and the structural integrity of the new 
trunnion interface configuration was confirmed. 
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AIRLOCK AFT RING 
PRIMARY LONGERON TRUNNION 
STAR80ARD SIDE 


Figure 107 - Location of misdrilled hole at Airlock primary trunnion fittings. 



Airlock Port Primary Trunnion Fitting 
Misdrilled Holes 


Results of Analysis 


• Nominal primary trunnion fitting analysis considered 20 web bolts 
effective lor shear and axial load transfer 

• Misdrilled holes produced unacceptable edge margins m pod 
fitting therefore leaving 19 acceptable web bolts to cany the 
loads. (One bolt removed from nominal condition) 

• Port Primary Trunnion System F.E. Model revised to reflect as- 
built condition with 19 borts effective in the fitting web 

• Nastran analysis rerun for all critical liftoft/landing, ascent, 
descent, emergency landing, and pressure only loading 
conditions. 


Figure 108 - Analysis process for the Airlock Port Primary Trunnion Fitting misdrilled holes. 
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Airlock Starboard Primary Trunnion Fitting 
Misdrilled Holes 


Results of Analysis 

• Nominal primary trunnion fitting analysis considered 20 web bolts 
effective for shear and axial load transfer 

• Misdrilled holes produced unacceptable edge margins in 
starboard fitting therefore leaving 18 acceptable web bolts to carry 
the loads. (Two bolts removed from nominal condition) 

• Starboard Primary Trunnion System F.E. Model revised to reflect 
as-built condition with 18 bolts effective in the fitting web. 

• Nastran analysis rerun for all critical liftoff/landing, ascent, 
descent, emergency landing, and pressure only loading 
conditions. 


Figure 109 - Analysis process for the Airlock Starboard Primary Trunnion Fitting misdrilled Holes. 

Airlock Port Primary Trunnion Fitting 
Misdrilled Holes 


ResuHs of Analysis 

Port Primary Trunnion Fining Summary of Results 
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Figure 110 - Structural margin calculation for the "as-built" configuration of the Airlock port primary 

trunnion interface. 


76 




Airlock Starboard Primary Trunnion Fitting 
Misd rilled Holes 



Results ot Analysis 

S larboard Primary TrLUfBiion Fitting Summa ry of Results 
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Figure 111 - Structural margin calculation for the "as-built" configuration of the Airlock starboard 

primary trunnion interface. 

Another issue which arose during the airlock assembly was a broken bolt that was discovered at the 
Equipment Lock to Crew Lock transition adapter interface during a routine inspection of the hardware 
on the shop floor. Micrographs of the failure surface and structural analysis were reviewed to determine 
that the most likely cause of the bolt's failure was an aggressive overtorquinq of the bolt head. A 
summary of the testing on a representative bolt to confirm its structural capability is provided in Figure 
112 [49]. After the investigation, greater security measures and access controls were implemented on 
the factory floor and no repeat of such an incident occurred for the remainder of the ISS pressurized 
element structural fabrication effort. 

These manufacturing anomalies received a great deal of scrutiny because the Airlock was a protoflight 
structure. It was one-of-a-kind, so there was no follow-on article to correct any discrepancies. Also, the 
static test program could not have induced any detrimental deformation, or worse-a failure of some 
kind, which would have resulted in a severe cost and schedule impact to the ISS Program. 

The data from the Airlock structural testing was used to correlate the finite element models used to 
develop final structural margins. Two of these models are shown in Figure 113 [50]. The modal test 
performed in the Space Shuttle Payload Modal Test Bed at MSFC provided data that was used to provide 
a dynamic model to the Shuttle and ISS Programs for verification loads assessment. 
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TO: EH2J/R. Farr 

FROM : EH23/W. R. Gaaiwcill 

SUBJECT c BAt&aOLEflUii Bolt Testing 


Ona failed BAtB^OLE-aUlS to It, lit h'JLmbc!r Ml £3 5 stated to- have 
failed at jn installation tarqrie value at 4D im-lfcs has been 
evaluated relative to other BACB J-0LE4U12 holts Cron ttte saae lot,., 
HlCPUtCWtum between the failed and unfailed to its ara typical 
at those expected for A .JB6 MUrial and ar« «ssentially identical. 

Micraha^dneaa readings taken at the center Of th* ahank and cd^e of 

the Meads of the failed and unfilled baits are typical or those 

expected for work strengthened A2 0ti Miter la 1 and arc essentially 

identical, ranging from HRc 45-47. TonsiU testing of one unfailed 
bolt in accordance with Mrk-$T0-jLl!,2-a resulted in a load at 
failure value, of 93 3B pounds. This corresponds tc an Ftu of Z56Xsi 

us jng a tensile stress area of 03437 . Gaging of two threads 
using a rosi - contact dimensional inspacticn systam showed these two 
holts to hflvc the c*tre;t pitch diameters, pitches, minor diaaiecers 
and flanJt angles. The major diu*t4T* wore low&r than MIL-S-551? 
lower specification limit of .2435" by appeoMinattly ..QdS, however + 
this shgiyld bat significant ly affect the torque required to break 
thia holt. SEM analyses of the fractnf* -Surface <jf the failed belt 
showed no unusual indications. 

Th* above findings do not support the supposition that the eubjsct 
BACB3 G LE4 U 1 2 bolt failed as a result Of applying a torque af 40 in- 
Lbs. These bgj,ts urh ekprirted to easily withstand the 100 in- lb 
installation torque values specified for thorn - 

Plaase ref«c- questions or comments to the undersigned at telephone 
number 544-2592, FAX number $44 -S077. 

'rfayn-a R, camwell 
Metallurgical SJCD Branch 

oc i 

EH21/P. Kunafo 
Efill/B. Bhat 


Way 13, 1997 


Figure 112 - Assessment of failed Equipment Lock to Crew Lock transition adapter interface bolt. 
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Airlock Structures CDR 
Stress Analysis 




Finite Element Models 


3G0 u Global shell model of 
Ihe Airlock- Model used To 
investigate overall response of 
Hie structure and to identity 
primary structure stress 
hoi spots. 


Airlock Structures CDR 
Stress Analysis 


360 5 Debited Shelf model of 
the Airlock F*d Bulkhead, 

Modal used for buckling analysis 
Of the Airlock Fwd gore panels;. 


Figure 113 - Examples of finite element models used for stress assessment of the Airlock. 




There were four High Pressure Gas Tanks (HPGTs) that were launched with the Airlock on a separate 
cross-bay pallet (Figure 114) and installed on the Equipment Lock by EVA that had to go through both 
static and modal testing as well as get fit-checked to their on-orbit interfaces. Dedicated static testing of 
the HPGT interfaces to their carrier and modal testing of an HPGT tank assembly were performed. 
Tooling which simulated the Equipment Lock interface was developed and all four HPGT Orbital 
Replacement Units (ORUs) that were launched on the flight along with a fifth spare HPGT ORU were fit- 
checked to the tooling and all HPGT ORUs were found to be interchangeable amongst all locations. 

The HPGT themselves are Composite Overwrapped Pressure Vessels composed of carbon-fiber/resin 
with stainless steel liners. These tanks were proof-pressure tested to 1.5 x MDP and their stress-rupture 
life was calculated. About a decade after they were launched, concerns were raised regarding the stress- 
rupture life of composite overwrapped tanks used on the Space Shuttle and the ISS. (Composite 
Overwrapped Pressure Vessels (COPVs) are also used on the ammonia and nitrogen tanks on the SI and 
PI trusses as well as in the Plasma Contactor Xenon tank on the Z1 truss.) After extensive analysis and 
testing, the stress rupture life issues for the ISS COPVs were resolved. 



Figure 114 - STS-104 cargo element in the Orbiter Payload Bay (Four HPGT's on their carrier are shown 

at the top of the photo). 
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STS-104 containing the "Quest" Airlock and the High Pressure Gas Tanks was launched on July 12, 2001. 
The Airlock was installed on ISS on July 15 th with the High Pressure Gas Tank installations occurring later 
in the mission. The final of the three spacewalks on the mission occurred from the "Quest" Airlock. The 
airlock structure was certified for an estimated 52 EVAs per year over 15 years, so it is anticipated that it 
will have more than enough structural life for the duration of the ISS program. (As of May, 2011 there 
have been a total of 93 EVA's have been performed from the "Quest" Airlock.) 

Pressurized Mating Adapters 

The Pressurized Mating Adapter was a transition structure originally designed to provide the interface 
between the Space Shuttle Orbiter and the Space Station Freedom. Its unique shape was developed to 
preclude contact between the Node or Lab endcone and the Orbiter Forward Fuselage during docking 
with the Shuttle External Airlock. It was constructed from four Aluminum 2219 forgings, machined to the 
required thickness and circumferentially welded using VPPA welding by The Boeing Company, 

Huntington Beach, California (Figure 115). 



Figure 115 - Pressurized Mating Adapter undergoing final assembly at Boeing - Huntington Beach. 


When the FGB and Service Module were added to the assembly sequence, the PMA was selected as the 
interface between the aft axial port on Node 1 and the forward port on the FGB. This required that a 
third PMA be added to the program baseline to provide redundant docking interfaces for the Orbiter as 
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well as a permanent interface between the Node 1 and the FGB. The Androgynous Peripheral Attach 
System (APAS) was added as the interface between both the FGB and the Shuttle Orbiter Docking 
System and the PMA. The PMA was sized for the pressure and the on-orbit dynamic loads of Orbiter 
docking and also for the loads at the FGB/PMA interface. 

The interface loads between the FGB and the PMA were negotiated between U.S. and Russian engineers 
and provided to the Boeing Company as structural design criteria in the FGB/PMA Interface Control 
Document. The maximum design pressure for the PMA was 16.0 pounds per square inch absolute (psia) 
based on Orbiter Environmental Control and Life Support System (ECLSS) failure modes. An APAS from 
RSC-Energia and a CBM from Boeing-Huntsville were provided for integration on the opposite ends of 
the PMA. 

During the ISS Program definition activity, a decision was made to delete all structural testing on the 
PMA with the exception of a proof pressure test (Figure 116) [51]. This programmatic decision required 
technical rationale to be developed ex-post-facto. The PMA would be the primary interface between ISS 
and Shuttle and between the U.S. and Russian Segments for the life of the ISS, so this structural 
verification approach required a great deal of engineering work to justify. The MM/OD shields on the 
PMA were attached using bolts rather than DZUS fasteners as was done for the Lab, Node and Airlock 
and the successful acoustic testing of the Lab MM/OD shield lent credibility to the deletion of the 
acoustic test. The PMAs were mass simulated during the Node STA modal test, so their contribution to 
the dynamics of the overall integrated STS-88 payload would be characterized and included in the 
dynamic math models provided to the Shuttle Program. The static strength capability of the PMA, as 
determined by analysis, showed high margins of safety for both the pressure only and on-orbit 
combined pressure and mechanical loads. 


PMA Test Setup 



Figure 116 - PMA Proof Pressure Test Set-up. 
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A concern for the PMA was the residual stresses in the welds joining the four forgings of the PMA 
pressure shell. The manufacturing development article fabricated for the PMA pressure shell showed 
excessive weld mismatch and distortion at each circumferential weld due to the VPPA weld process 
(Figure 117) [52]. With the help of NASA and Boeing engineers who had worked this issue on the Node 
structure, the weld process was refined and the three subsequent PMA articles showed significantly less 
mismatch (sentence repeated below). However, the verification that the stress analysis predicted the 
behavior of the PMA under pressure and on-orbit loads accounting for the weld mismatch required a 
new pressure test to be performed on the PMA weld development unit. 


Weld Phase C Section Cuts 



Figure 117 - Weld Mismatch on the PMA Manufacturing Development Unit. 

The PMA weld process development unit was subjected to a 70 psi pressure test (Figure 118) [53]. This 
test condition was intended to simulate the combined on-orbit stresses that the PMA would see when 
pressurized to the maximum design pressure of 16.0 psi and the on-orbit mechanical loads. The PMA 
was heavily instrumented to understand its behavior under pressure (Figure 119) [54]. This test 
successfully reached 70 psi but as the pressure was reduced multiple gages exhibited erratic behavior. 
Due to the pressure levels and the large internal volume of the PMA, the test was performed in a 
covered outdoor test bunker. During the test it began to rain and the erratic behavior of the gages was 
attributed to moisture entering some of the strain gage circuitry. In addition to a sensitivity study using 
the integrated ISS on-orbit dynamic model where the Young's Modulus in the PMA was varied between 
+100% and -50% (Reference: PMA Structural Integrity Report [55]) of its predicted value showed 
negligible differences in the dynamic response and therefore no increase in on-orbit loads. Both the test 
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results and the dynamic analysis enabled a cogent technical rationale to be developed for the limited 
structural verification approach employed on the PMA (item between the commas is too long for this 
sentence). Subsequently, each of the three flight PMAs were successfully proof pressure tested to 1.5 x 
MDP with a reduced set of instrumentation. The weld mismatch for the flight PMAs was significantly less 
than the development unit PMA as Boeing-HB with assistance from MSFC weld experts improved their 
tooling fixity, weld process and allowables development process (Figure 120) [56] The technical 
rationale for limited test program was challenged when one of the PMAs was lifted by a crane prior to 
being unbolted from its support stand. Flowever analysis and inspection showed this incident did not 
damage the hardware. 

PMA-1 and PMA-2, mounted on the aft and forward endcones of Node 1, were launched on STS-88 and 
the PMA-3 was launched attached to a modified Spacelab pallet carrier on STS-92 (Figure 121) [57]. The 
Flight Support Equipment (FSE) to launch PMA-3 was designed, built and tested at MSFC by The Boeing 
Company. A static test of the FSE to 1.2 x limit load was performed. Static loads were applied to the FSE 
through a PMA simulator (Figure 122 and 123) [58]. The Spacelab Pallet did not have to be recertified 
for static loads as the hardware was designed and tested to an ultimate factor of safety of 1.4. A modal 
survey of this configuration was also performed. The FSE was heavily instrumented with strain and 
deflection gages and the individual struts and lugs were characterized for load vs. strain before they 
were incorporated into the static test assembly (Figure 124) [59]. 

Pressure Test Level 


m Maximum expected stresses for alt PMA loading events (NSTS s orv 
or b 1 t, gro und hand ling} we re ident if led 

• Maximum stress in a weld of 1 8697 psi in weld 3 

■ A finite element model was created which duplicated the test setup 

• Includes effects from hydrostatic pressure and weight of PMA 
and ARAB blanking plate 

■ Test pressure of 70 psi created a FEM stress in weld 3 of 16711 psi 

• Stresses in remainder of the structure were calculated 

m Testing to 70 psi overtests welds 1 and 2 along with the APAS 
flange region 

• Testing weld 3 to ultimate levels assumes that residual 
stresses are similar in the three welds 

- Deformed shape less at welds 2 and 3 


Figure 118 - Stresses-induced in welds by 70 psi pressure test on the PMA development unit. 
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PMA Test Strain Gages {continued) 
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Figure 119 - Strain gage locations on the PMA. 
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Figure 120 - Summary of weld characterization testing performed for the PMA weld process. 


86 





-Y-UhUCGA 1 AW F I 
OTUTGQG'Ai'IM 


AM 1 1 

MHQ0M3M 


nOTAJUHIH TJ.JJA ’ 


jWTAAjMin AH'I QrlA BMAJffl MWUGII 


Figure 122 - PMA Simulator attached to the PMA-3 FSE/Spacelab Pallet. 
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Figure 123 - Static test configuration for the PMA-3 FSE. 


88 




Figure 124 - Strain Gage layout for PMA-3 FSE. 
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Node 2 


With the decision by the ISS Program for the European Space Agency to provide both Node 2 and Node 
3, the structural design of these elements was no longer common with that of Node 1 so a new 
structural verification test campaign needed to be developed. The Node 2/3 structural design was based 
on the Multi-Purpose Logistics Module (MPLM) design, so these two nodes were longer than Node 1. 
Consequently, the mass, trunnion spacing and on-orbit loads would result in entirely new launch and on- 
orbit loading environments beyond what the Node 1 was certified to. It was ESA's responsibility to 
certify the Node 2/3 structures to the new loads requirements. Both Node 2 and Node 3 were designed, 
manufactured and tested by Thales Alenia Space Italy. The primary structure was constructed from 
Aluminum 2219. The radial port design was based on drawings supplied by The Boeing Company. VPPA 
welding was used to join the various segments. 

The structural verification approach for Node 2/3 differed in several significant ways from Node 1. First 
of all, there was no complete module structure used as a static test article. A simulator, consisting of 
two adjacent radial ports and an axial port that were stiffened to represent the Node 2 structure, was 
used for static testing. Pressure domes were installed over each port. Pressure testing to 2.0 x MDP and 
combined pressure and mechanical loads testing to 1.5 x (pressure + mechanical loads) was performed 
on the Node 2/3 STA (but you just said there was no STA). (There were also a few cases where the 
hardware was critical for on-orbit mechanical loads only. That hardware was tested to 1.5 x limit 
mechanical loads.) A proof pressure test was performed on both flight articles and CBM radial port 
flange displacements were measured during this test to confirm they were within their certified limits. 
Post-proof test NDE was only performed on the welds of Node 3 (per ECP170). Modal testing was 
performed on the Node 2 flight article. 

The structural strength and acoustic certification for launch in the Shuttle Orbiter payload bay for Node 
2/3 also leveraged on the MPLM design, where an ultimate loads test to 1.4 x limit load and an acoustic 
test to the 141 decibel (dB) Overall Acoustic Sound Pressure Level (OASPL) were performed on a 
dedicated MPLM test article in Toulouse, France. The Meteoroid/Debris Panels (MDPS) on the MPLM 
were certified by similarity and component level ultimate load tests on the trunnion systems were used 
to certify the Node structure to the launch loads. This overall structural verification approach received a 
great deal of scrutiny from all of the stakeholders. One issue that did arise was the lack of post-proof 
test NDE on the welds of the Node 2 structure. An element level leak test in the Kennedy Space Center 
Operations and Checkout Building vacuum chamber for Node 2 and a one atmosphere delta-pressure 
helium accumulation test for Node 3 alleviated any leakage or structural integrity concerns with the 
welds on the hardware (Figure 125) [60]. 

The Node 2, dubbed "Harmony", was launched on October 23, 2007 and was attached to the "Destiny" 
lab on November 14 th . It later became the central hub for the attachment of the "Kibo" Japanese 
Experiment Module, "Columbus" Attached Pressurized Module and PMA-2. It also accepts both the 
MPLM and the H-ll Transfer Vehicle (HTV), operated by the Japanese Aerospace Exploration Agency 
(JAXA) on its nadir port. 
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Rapjy Id Alin 0 (: ES4-05-060 


TO: EA4/ Robert A, Parrish 

E$2/Komd Nagy 

FROM: ES4/ Glenn M. Ecord 

ES2/Raymond M. Patin 

SUBJECT: JSC Fracture Control Board Position for 1SS Node 2 Welds 

As requested, the JSC Fracture Control Board has developed a position regarding the absence of 
post-proof weld inspection on Node 2 , A discussion of the issues, acceptance rationale, and the 
Board position are provided in the attached position statement. The position reflects a 
unanimous vote by the Board members. 

Any comments or questions should be directed to Glenn Ecord (281) 483-8924 or Raymond 
Patin (281) 483 8928. 


Glenn M, Ecord Raymond M. Patin 

Materials and Processes Branch Structures and Dynamics Branch 

Co-Chair, JSC Fracture Control Board Co*Chair 5 JSC Fracture Control Board 

Cc: 

ES/T. Kaye 
ES/D. Drewry 
ES2/J. Rogers 
ES2/C. Hansen 
ES2/J, Smith 
ES4/B. Files 
ES4/K. Beckman 
ES4/R, Dasgupta 
ES4/M. Pedley 
ES4/D. Rybicki 
ES4/M.3hoeb 
NX/M. Havican 
NX/R. Kohli 


EB/J. McMahon 
EM20(MSFC)/G* Swanson 


Figure 125 - Summary of Node 2 weld assessment by the JSC Fracture Control Board. 
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JSC FRACTURE CONTROL BOARD POSITION 
ACCEPTABILITY OF NODE 2 WELDS 

November 4, 2005 


INTRODUCTION 

TOie JSC Fracture Control Board was asked to develop a position on the acceptability of the 
Node 2 welds for flight relative to existing fracture control requirements. The Node 2 welds 
are made of VPPA (Variable Polarity Plasma Arc) welded 2219 aluminum alloy and arc 
formed in a single pass. Use of the fracture control leak-before-burst (LBB) requirement for 
the assurance of module safety, as specified in paragraph 4.9 of SSP 30558C, “Fracture 
Control Requirements for Space Station", has been proven to be viable for Node 2 welds via 
leakage verification testing performed on samples that were representative from a section 
thickness, welding process, and coatings perspective. Thus, a crack-like defect that 
propagates through the weld thickness during usage will result in an uninhibited, detectable 
leakage that allows for corrective operational action to be taken prior to a loss of life event. 

The Node 2 flight unit weld received a full inspection of the assembly welds that screened for 
surface (inside & outside) and volumetric crack-like defects prior to the proof test event. The 
flight unit was proof tested to 1.5x the maximum design pressure. A post-proof test 
inspection of the Node 2 welds using the same surface and volumetric techniques in the pre- 
proof test inspection was not performed. The fully integrated Node 2 flight unit was however 
subjected to a high fidelity vacuum chamber leak check with a low concentration of helium 
gas and mass spectrometers for leakage detection. The successful completion of this leak test 
t£ck|^ no Pressure sealing welds have defects that extend completely across the weld 


DISCUSSION 

A post proof test inspection was also not initially performed on the MPLM flight units, and 
the high fidelity vacuum chamber leak check was also not performed. Subsequently, a single- 
sided eddy-current inspection was performed on the MPLM assembly welds with the intent of 
verifying that no crack-like defects extend fully across the section thickness. A vacuum 
chamber leak check was used to establish the same weld information for NODE 2. It is 
concluded that the initial state of the weld quality in the post-proof test condition for the 
MPLMs and Node 2 has been verified to the same degree, albeit along different paths. 

The protective coating used on the MPLM flight units inhibited the leakage and detection of 
gas through a crack that extended fully across the section thickness. Use of the leak before 
burst fracture control logic path in this instance was not an option, and a safe-life approach 
was required. Without a complete post-proof test inspection of the welds (surface and 
volumetric) a bounding approach was required to quantify the initial defect size which was 
required to define the service life capability of the MPLM units. Structural loading of the 
MPLM welds was found to be dominated by the pressurization cycle associated with the 
ascent and decent phase of the mission; transportation, low-frequency transient loading, and 
on-orbit operational loading events were not significant contributors to the overall fatigue 
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Figure 125 (continued) - Summary of Node 2 Weld assessment by the JSC Fracture Control Board. 
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damage accumulation. Service life verification testing at the coupon level was performed at 
MSFC with uniaxial constant amplitude loading that was representative of the pressurization 
loading cycles. The test results demonstrated that the NASGRO service life and critical crack 
size results (utilizing the Alenia test defined fracture mechanics property data) were 
conservative yet fulfilled the required service life interval. 

As was mentioned in die introduction, it has been test demonstrated that the Node 2 coating 
material will result in an uninhibited leakage state. This system response allows for fracture 
control certification with the leak-before-burst (LBB) requirement. The LBB requirement is a 
residual strength criterion that requires the critical crack size to be a through-thickness crack 
of length greater than or equal to ten times the wall thickness (residual strength is the load 
carrying capacity of a structural element with crack-like damage present). 

Internal pressurization of the Node 2 module induces maximum stresses (oriented 
perpendicular to the welding direction) in the end-cone radial welds. Unlike the MFLM units 
wherein the pressurization cycle is the dominant cyclic event, the Node 2 cyclic stress 
environment is driven primarily by on-orbit internal pressure perturbations and mechanically 
induced cyclic loading that are transmitted through the module via structural connectivity at 
the various ports. The influence of externally applied mechanical loading, with variations in 
magnitude and orientation, along with a simultaneous internal pressure, was investigated 
analytically with the objective of identifying the peak weld stress location for the state of 
combined loading. The location of the peak weld stress location in the Node 2 welds 
remained at the end-cone radial weld location. As in the MPLM analysis, weld geometric 
discontinuities in the form of worst case peaking and mismatch were induced analytically 
such that the peak local stress magnitudes and associated gradients were defined. The load- 
stress transfer results were then combined with defined load-time histories to generate a 
fatigue spectrum. These results were incorporated into the NASGRO fracture mechanics 
analysis code. The minimum critical size of the crack cases analyzed was 74mm, and this 
exceeds the LBB requirement (JOt = 70 mm ; weld thickness is 7 mm). 

The LBB requirement does not explicitly ensure a service life interval, but assures structural 
integrity in the form of a benign failure mode with the assumption the lOt critical crack size 
will bound any preexisting crack-like defects. The high fidelity vacuum chamber leak check 
ensures that any preexisting crack-like defects do not extend hilly across the weld thickness 
(crack depth / thickness < 1). A bound on the surface length of a preexisting crack-like defect 
is attained via the analytical aspect ratio lower limit of 0. 1 (crack depth / surface crack 
length), and current external tank (ET) weld defect size characterizations in regions that 
possess geometric and process similarity to the MPLM and Node 2 welds. Initial defects of 
this size (or less) are bounded by the computed critical crack size and thus a leaking failure 
mode is ensured - Node 2 is LBB. 


The service time required to propagate a fatigue crack through the wall thickness requires 
significantly more work to confidently characterize. The current service life methodology is 
known to conservatively predict damage accumulation for a tensile overload dominated 
spectrum, and the Node 2 spectrum falls within this category — the proof test loading cycle 
will act to neutralize detrimental residual stresses that may exist in the weld region, and also 
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significantly reduce the rate of damage accumulation for lower level loading cycles. The 
level of conservatism is a strong function of the spectrum composition (frequency and order 
in which overload events occur), geometry, and crack size. Currently, the Node 2 service life 
interval for the bounding initial crack sire defined above does not demonstrate full mission 
capability with a scatter factor of 4 prior to the fatigue crack transitioning thro ugh the wall 
thickness and resulting in a leaking condition, A more definitive answer regarding the actual 
service life capacity of the Node 2 welds requires a series of representative coupon tests that 
investigate various initial crack sizes/shapes in conjunction with spectrum variations that 
quantify the sensitivity of the results to magnitude of the overload events, the order or 
sequencing of these events, and influence of truncating lower load levels from the defined 
fatigue spectrum. 


BOARD POSITION 

The Node 2 module welds were fully inspected (surfaces & volume) prior to pressurization 
proof test. The Node 2 unit was then proof tested to 1 .5* maxim um design pressure, and leak 
checked in a vacuum chamber that included helium gas in the pressurization charge with 
externally located mass spectrometers to detect any leakage sources. There were no issues 
associated with each of these structural integrity verification steps. Detailed analyses that 
accounted for worst case combinations of externally applied mechanical and pressurization 
loadings, coupled with worst case weld geometric discontinuities in the form of peaking and 
mismatching were performed. The smallest critical crack size associated with this analysis 
was in excess of ten times the wall/weld thickness. The Node 2 flight unit is therefore 
concluded to comply with the SSP 30558C Fracture Control Requirements for Space Station 
as being LBfi. Fulfillment of this requirement does not ensure that the full design life of the 
module can be achieved without the occurrence of leakage resulting from a fatigue crack. 

The leakage rates defined in representative test specimens indicate that onboard detection 
systems will identify the anomalous condition for very small effective through thickness crack 
lengths, thus allowing ample time for corrective action to prevent a loss of life condition. 

It is noted that analytical and test efforts by other agency groups on this problem are ongoing 
at the time of this decision. The wort referenced herein has been coordinated with these 
teams and a significant variation in the final results is not anticipated* In the unlikely event 
the test results do differ significantly, the Board will reeval uate the available data. 

Based upon the assessment reported herein, the JSC fracture control board recommends use of 
the Node 2 module as -is based upon compliance with the leak before burst fracture control 
requirement. 


Glenn M.Ecord , Co-Chair 


Raymond M + Pafin, Co-Chair 


Figure 125 (concluded) - Summary of Node 2 Weld assessment by the JSC Fracture Control Board. 
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Node 3/Cupola 


Perhaps the most interesting structural verification campaign was implemented on the Cupola. This 
unusual structure consisted of six trapezoidal shaped windows and a 28"-diameter circular window for 
use by the ISS crew to oversee robotic and docking operations as well as provide spectacular vistas for 
Earth observation. This structure was launched on the port axial port of Node 3 (called "Tranquility") 
and the Cupola was later moved and attached to the nadir axial port of Node 3. It was built by Thales 
Alenia Space Italy under an ESA contract based on a structural design developed by The Boeing 
Company, Huntsville, Alabama and using fused silica windows supplied by Corning, Inc. 

As was done for the Lab structural verification, aluminum plates were substituted for glass in order to 
determine stress distributions in the Cupola window panes during pressure testing. The requirement to 
be able to change out a window pane on-orbit was also levied on the Cupola as were all of the other 
requirements from SSP 30560. A dedicated structural test article and a flight article Cupola were 
constructed. The Cupola was constructed from two Aluminum 2219 forgings, one for the cylindrical 
section and another for the section containing the windows. During stretch forming, one of the 
cylindrical forgings cracked. This was due to a shortcoming in the mechanical process of the 
manufacturing as opposed to a forging material defect. A new forging was successfully stretch-formed 
to replace the destroyed forging. 

NASA was heavily involved in determining the structural verification approach and in training both the 
ESA and Alenia engineers on the specific activities needed to handle, inspect, clean and protect 
aerospace-quality glass. A seven-step test campaign was developed where instrumented aluminum 
plates were substituted for the redundant and primary glass pressure panes and the Cupola STA was 
tested to 2.0 x limit pressure. Then the aluminum plates were systematically removed from one 
trapezoidal window and the overhead circular window in order to understand the change in the stress 
distribution if a primary or redundant pane was lost. Additionally, to demonstrate structural integrity of 
the Cupola in the event of a window change-out operation, pressure tests were performed with either 
both panes of a trapezoidal window or both panes of the overhead window completely removed These 
tests were performed with an external pressure cover over the opening created when the window was 
completely removed. Finally, a 2.0 x limit pressure test was performed with no glass panes included on 
the Cupola STA. This test plan is shown in Figure 126 [61]. 

A modal test was performed on the Cupola STA with aluminum panes installed in all of the window 
assemblies to provide a dynamic math model for both its launch configuration attached to Node 3 and 
for its inclusion with the ISS structural dynamic math model. No static testing was performed on the 
Cupola STA because the primary driving load case was on-orbit pressure. Also, the Node 3 radial port 
CBM was certified to a much higher bending moment than that induced by the Cupola during launch. 

The Cupola STA was outfitted for the element-level acoustic test with one trapezoidal glass window and 
the overhead glass window with external shutters installed. During the instrumentation procedure, a 
strain gage wire was inadvertently squeezed between the frame of a trapezoidal window and the glass 
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causing a crack in the glass. This window was replaced and the acoustic test was successfully performed 
to the 141dB OASPL environment. The windows were inspected in place after the acoustic test with no 
damage identified. One trapezoidal window assembly and the overhead window assembly, both with 
glass panes included, also successfully passed a component-level random vibration test with no damage. 

The actual flight window assemblies were installed for a final proof pressure test to 1.5 x limit pressure 
on the Cupola flight article after the strain gage data from the aluminum panes were correlated with the 
Cupola finite element model. (The aluminum panes were never used in the Cupola flight article, only on 
the STA). A helium leak test was performed on each flight seal installation of each flight window 
assembly to verify the required redundancy and performance of each flight seal installation. A helium 
accumulation leak test was performed to complete the structural test campaign (Figure 127). The 
Cupola was shipped from Alenia to KSC where the windows received a final inspection prior to mating 
with Node 3. 

The Node3/Cupola was launched by STS-130 on February 8, 2010. It was successfully ingressed on that 
mission and has provided views for some of the most spectacular imagery of both the Earth and the ISS 
from inside the ISS (Figure 128 and Figure 129). 
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Final Meeting Minutes: Cupola Structures and Mechanical Splinter Meeting 

Date: 3/24/99 
Attendees: 

Lynda Estcs-N AS A/JSC 
John Zipay-NASA/JSC 
Hanh N guy en-Xuan-N ASA/JSC 
Francesco Accardi-Alenia 
Salvatore Rubino -Alenia 
Franco Candela-Alenia 

Minutes: 

Representatives of NASA and Alenia met to discuss structures and mechanical systems issues pertaining to 
the Cupola. The issues that were discussed and the actions that were taken are detailed below. 

STA Pressure Test Configurations 

The Cupola STA pressure test configurations presented in CUP-PL-AI-0017 Cupola Assembly Integration 
and Verification (AIV) Plan were reviewed. NASA expressed concern that the proposed test plan subjected 
the top window assembly including glass and a side window assembly including glass to two ultimate 
(2.0 x MDP) and one proof pressure (1.5 X MDP) cycle. NASA proposed modifications to the test 
sequence that exposes the glass to only one ultimate pressure cycle and qualifies the various expected 
window configurations. This proposed sequence is given below: 
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Configuration A (Nominal, On-orbit configuration) 



External Pane 

Internal Pane 

Top 

Aluminum 

Aluminum 

Side 1 

Aluminum 

Aluminum 

Side 2 

Aluminum 

Aluminum 

Side 3 

Aluminum 

Aluminum 

Side 4 

Aluminum 

Aluminum 

Side 5 

Aluminum 

Aluminum 

Side 6 

Aluminum 

Aluminum 


♦ Pressure. 2.0 x MDP 

♦ Leakage test on shutter mechanism and window assemblies will be performed at 14.7 psid. Window 
assemblies that have the flight configuration frames will be leak tested. 


Figure 126 - Summary of the Cupola STA window pressure test campaign. 
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Configuration B (Failed top interior and side panes and failed external side pane) 



External Pane 

Internal Pane 

Top 

Aluminum 

None 

Side 1 

Aluminum 

None 

Side 2 

Aluminum 

Aluminum 

Side 3 

Aluminum 

Aluminum 

Side 4 

None 

Aluminum 

Side 5 

Aluminum 

Aluminum 

Side 6 

Aluminum 

Aluminum 


4 NASA proposed that the side windows that have lost redundancy be placed opposite to one another 
(rather than beside one another) in order to isolate the effects of the compromised windows. A worst 
case configuration of two side by side failed panes can be verified by analysis, 

♦ Pressure: C5 x MDP 

Configuration C (Failed external top pane, failed internal side pane with external cover installed) 



External Pane 

Internal Pane 

External Cover 

top 

None 

Aluminum 


Side 1 

Aluminum 

None 

Cover included 

Side 2 

Aluminum 

Aluminum 


Side 3 

Aluminum 

Aluminum 


Side 4 

None 

Aluminum 


Side 5 

Aluminum 

Aluminum 


Side 6 

Aluminum 

Aluminum 



♦ Pressure: L5 x MDP 

Configuration D (Failed external side pane with external cover installed) 



External Pane 

Internal Pane 

External Cover 

Top 

None 

Aluminum 


Side 1 

Aluminum 

None 


Side 2 

Aluminum 

Aluminum 


Side 3 

Aluminum 

Aluminum 


Side 4 

None 

Aluminum 

Cover included 

Side 5 

Aluminum 

Aluminum 


Side 6 

Aluminum 

Aluminum 



♦ Pressure: 1 . 5 x MDP 


Figure 126 (continued) - Summary of the Cupola STA window pressure test campaign. 
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Configuration E (Failed external Top Pane with external cover installed , side window external cover only) 



External Pane 

Internal Pane 

External Cover 

Ton 

None 

Aluminum 

Cover included 

Side \ 

Aluminum 

Aluminum 


Side 2 

Aluminum 

Aluminum 


Side 3 

Aluminum 

Aluminum 


Side 4 

None 

None 

Cover included 

Side 5 

Aluminum 

Aluminum 


Side 6 

Aluminum 

Aluminum 



♦ Pressure: 2.0 x MDP 

A leak test of the cover is included (at 14.7 paid.) 


Configuration F (Top window external cover only) 



External Pane 

Internal Pane 

External Cover 

Top 

None 

None 

Cover included 

Side 1 

Aluminum 

Aluminum 


Side 2 

Aluminum 

Aluminum 


Side 3 

Aluminum 

Aluminum 


Side 4 

Aluminum 

Aluminum 


Side 5 

Aluminum 

Aluminum 


Side 6 

Aluminum 

Aluminum 



♦ Pressure: 2.0 x MDP 

♦ A leak, test of the cover is included (at 14.7 psid.) 
Configuration G (Glass to Metal Interface Verification) 



External Pane 

Internal Pane 

External Cover 

Top 

Glass 

Glass 


Side 1 

Glass 

Glass 


Side 2 

Aluminum 

Aluminum 


Side 3 

Aluminum 

Aluminum 


Side 4 

Aluminum 

Aluminum 


Side 5 

Aluminum 

Aluminum 


Side 6 

Aluminum 

Aluminum 



* Pressure: 2.0 x MDP 

* A leak test of the Top and Side 1 windows will be performed at 14,7 psid. 

It was suggested that configurations A through F be performed before configuration G. 

After the completion of configuration G, the glass window test articles (top and side windows) will be 
disassembled and a detailed inspection of all glass surfaces will be performed. Additionally, the seals/soft 
goods will be inspected for evidence of degradation or damage that may have occurred during the ultimate 
pressure test. 

Conclusion: NASA and Alenia agreed that the above test configurations were the most appropriate, 
incorporating the test verification objectives while minimizing risk to the glass. 


Figure 126 (concluded) - Summary of the Cupola STA window pressure test campaign. 





Figure 127 - Cupola flight article element level leak test. 
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Figure 128 - View of the Cupola attached to Node 3. 



Figure 129 - View from inside the Cupola. 
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Integrated Truss Element Structural Verification 


Zl truss/PMA-3, the Manual Berthing Mechanism and the "analysis-only approach" 

When the ISS assembly sequence was developed, the need to supply power to the vehicle using one pair 
of U.S. solar array wings had to be accommodated early in the configuration. Since there was no way to 
interface the P6 truss structure to Node 1 directly, a transition structure which contained a CBM on one 
end to interface with the Node 1 zenith radial port and a truss attach system on the other end to 
interface with P6 was created. Dubbed the "Z1 truss", this structure was initially designed to be a 
protoflight structure. When multiple ORUs, such as the Plasma Contactor and four Control Moment 
Gyros were added to this element, a dedicated flight article structure was built, integrated and flown; 
however, the protoflight test approach remained the structural verification strategy for the test article 
since the structural design, analysis and verification planning for this approach had already been put in 
place. The Z1 structure was designed for a minimum Factor of Safety of 1.2 on yield and 1.25 on ultimate 
for on-orbit loads and to 1.40 on ultimate for Shuttle-induced loads. The Z1 Structural Test Article is 
described in Figures 130 and 131 [62]. 



Zl Test Art Description 



Zenith Bulkhead 

Ku Boom 


CMC Stanchions (1 oT24) 


Port Trunnion Brace 

Port Bulkhead 
Jvu Boom Stanch ions 


CMC Bulkhead 
Stbd Trunnion Brace 


Toolbox Support 


August. 2 1 , 1997 
I'.R* 23 


Figure 130 - Zl test article description. 
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Z1 Test Art Description 


RMS Grapple Fixture Attach Area 



RPCM Plate 
Attach Area 

Attach Posts 


Figure 131 - Z1 Test Article Description. 

The Z1 truss was static tested to 1.2 x limit load at The Boeing Company (then Rocketdyne) - Canoga 
Park facility (Figure 132) [63]. The longeron trunnions were exercised with a trunnion planarity loads 
case (Figure 133) [64]. The interface on Z1 to the P6 truss was tested to 1.2 x limit load (Figure 134) [65]. 
The CBM, having been qualified as part of the Node 1 structural test series, was not static tested, but a 
pressure test of a dome that was integrated with the CBM in order to recover the CBM Control Panel 
Assemblies from the Node 1 zenith port was tested to 22.8 psid after the element was delivered to KSC 
(Figure 135) [66]. The Z1 structural test article was thoroughly instrumented with deflection transducers 
and strain gages (Figure 136) [67] in order to correlate the finite element model (Figure 137) [68]. 
Despite the best efforts of the team, due to the stiffness of the Z1 truss, the 1.2 x limit load requirement 
was not achieved on the Z1 truss keel trunnion during the static test. The test only achieved 1.08 times 
limit load. The Z1 keel trunnion was analyzed and found to have very high margin of safety, so an 
exception (SSCN 1995) to this requirement was submitted and approved by both the Shuttle and ISS 
Programs. 

A modal survey and sine sweep test of this structure was used to verify the dynamic model provided to 
the Shuttle Program for Verification Loads Analysis (Figure 138) [69]. The Z1 acoustic test to the 141 dB 
OASPL environment for 180 seconds was performed successfully in the Boeing reverberant acoustic 
chamber in Kent, Washington (Figure 139) [70]. The ORUs were represented primarily by MTAM (mass- 
thermal-acoustic-mock-ups), but some qualification hardware was included (Figure 140) [71]. 
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Z1 Test Design Review 
Load Fixtures 



CMC Lrwd Fixtures 


£n Antenna Plate 
Lead Ftxlmn 


Mil Sport 
LowH Fixture 

PCU Load 
FbdUireS 


Zenith Bullhead 
Load Fixtures 


Mid Spun 
Laid Fixture 


August 21 , 1 WT 
PjusW 


Zenith BuJklwad 
Load Fixture* 


imBJWUmWIAJL 

ip. u:e otatHIh 


Z1 Test Design Review 
Load Fixtures 



fcbm [ 

Fixtures 


Mid Span 
Load Fbtiure 


Mid Span 
l03d Future 


S *■ Rand 
Load Fixtures 


August 2; . 1997 
Pwtil 


Figure 132 - Load fixtures for Z1 Static Test Series. 





Z1 Trunnion Planarity Displacement 



0 . 16 ” 
case in 

(Mux Axial/Lateral) 
CASE 2B 

(Mai Zenith Vertical) 
CASE 3B 

(Max Nadir Vertical} 


Am«L33 n 1W7 


Figure 133 - Z1 trunnion planarity load test case. 
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Figure 134 - Z1 on-orbit loads test case. 
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Figure 135 - Views of Z1 test article showing PCBM interface and Pressure Dome. 


106 





Z1 Structural Test Design Review 
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Figure 136 - Deflection gage installation on the Z1 Structural Test Article. 
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Figure 137 - Z1 Finite Element Model used for static test correlation. 
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Figure 138 - Finite Element Model used for Coupled Loads Analysis. 
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On the STS-92 mission in October 2000, the PMA-3 was delivered to orbit with the Z1 truss. A Manual 
Berthing Mechanism (MBM), mounted to a Spacelab Pallet in the Orbiter cargo bay, interfaced with the 
CBM on PMA-3 and was used to provide an attachment system that was strong enough to support the 
PMA-3 for launch, but yet was able to be released by the EVA crewmembers once on-orbit. Two MBM 
units were built, one to be flown in the Orbiter and one that was permanently attached to the Z1 truss. 
While a thermal-vacuum, acoustic and modal test was performed on one MBM assembly, no static 
testing was performed on this unit, nor on the PMA to which it was attached. 

It is illustrative at this time to discuss the "no-test" or "analysis-only" approach to structural verification. 
It is pragmatically impossible to test every load-bearing component on a complex structure. Also, due to 
schedule, budget or technical constraints sometimes large elements are not amenable to full scale static 
testing. The structural integrity of these elements must still be validated by some means. 

In such cases where structural analysis is the primary method of structural verification for ISS primary 
and major secondary structures, significant scrutiny was given to the load derivation process, the 
complexity of the structural load paths, the materials used in construction of the hardware, the 
analytical methods employed and the factors of safety imposed on design. Most untested ISS primary 
and secondary structure was designed to a minimum factor of safety of 2.0 on ultimate loads with only a 
few exceptions. 

All untested structure was reviewed by both the ISS and Shuttle programs as well as by the responsible 
NASA structural engineers and safety communities. It should be emphasized that merely using a factor 
of safety of 2.0 does not imply that structural verification by analysis only is an acceptable option. As 
was written into CxP 70135, Structural Design and Verification Requirements for the Constellation 
Program and included in NSTS 14046, Payload Verification Requirements for the Space Shuttle (Section 
5.1. 1.3.1), there are no "analysis-only" factors of safety. The verification of a structure must be 
considered on a case-by-case basis, and the appropriate verification methods must be considered based 
on both the requirements and the design of that specific piece of hardware. 

P6/S6 truss. Photovoltaic Radiator (PVR) 

The P6 truss, launched on STS-97, November 30, 2000, was one of the heaviest and largest structures 
attached to the ISS. It spanned almost the entire usable length of the Orbiter payload bay and contained 
four longeron and two keel trunnions, which constrained it in one more Degree of Freedom (DOF) than a 
typical Shuttle payload. It contained a truss section, two photovoltaic thermal control system radiators 
used as the early active thermal control system for the ISS, an Integrated Electronics Assembly (IEA) 
section with a third radiator dedicated to the photovoltaic power system, multiple components of the 
electrical power system including batteries, battery charge/discharge units and voltage regulators, two 
solar array wings in their stowed configurations and a beta gimbal assembly for each solar array wing to 
articulate each array mast individually to track the solar beta angle. The P6 truss segment consisted of 
axial force members constructed out of aluminum and arranged in a box pattern. The IEA was 
constructed from mechanically fastened machined aluminum bulkheads. 


110 



Structural verification for this element involved a multitude of component tests of the major mechanical 
assemblies in addition to static, modal and acoustic testing of the cargo element. As part of ISS cost 
convergence activity, it was originally proposed that no structural testing be performed on the P6 cargo 
element. After strenuous objections by the principal author, a protoflight approach was taken to 
structurally verify this hardware. 

Dedicated structural test articles for the primary structure and major ORUs were eliminated and units 
that were ultimately refurbished for flight were tested to 1.2 x limit load. These units included the S6 
truss and IEA (used as the P6 structural test article), the Beta Gimbal Assembly, the Photo Voltaic 
Radiator (PVR) and the Solar Array Wing (SAW). Initially it was intended to test the primary Heat 
Rejection System (HRS) Radiator launched on the SI truss to protoflight levels and qualify the structure 
of the Photovoltaic Radiator (PVR) by "similarity". However, the size and structure of both radiators 
were significantly different and after the principal author and his team brought this forward to ISS 
Program management, a dedicated structural test to 1.2 x limit load was performed on the PVR. Static 
tests on the PVR and HRS radiators were performed by Lockheed-Martin, Dallas, TX. The PVR passed its 
static test and the results of the HRS radiator static test are described in a later paragraph. 

The P6 static test was performed in Huntsville, Alabama at MSFC in Building 4619 after testing on the 
Node 1 structure was completed but prior to the static testing of the Airlock structure. The test series 
exercised the P6 trunnions to 1.2 times Orbiter launch and landing loads. A trunnion relative deflection 
case and testing of the interfaces on the P6 truss to its major components such as the PVR, BGA, SAW 
and battery ORUs was performed. This testing not only verified the structural integrity of the cargo 
element, but assured that the major structures attached to the cargo element would not come free in 
the payload bay under launch or landing loads. The Rocketdyne Truss Attach System (RTAS) at the end of 
the P6 truss which attached P6 to Z1 (and later to the P5 truss) was also tested to 1.2 x limit loads. 

An extensive test campaign was undertaken on the deployed solar array mast supplied by Able 
Engineering to characterize the strength and natural frequencies of the deployed structure at 1%, 50%, 
99% and 100% deployment for on-orbit loads assessments. These tests helped immensely in certifying 
the deployed solar array for plume loads, docking loads and reboost loads and led to the development 
of multiple operational scenarios for protecting the integrity of the SAW over the life of the ISS. 
Evaluation of the SAW mast is still ongoing for various new load cases that have developed as new 
visiting vehicles are flown to ISS that did not exist in the 1990's when the solar array was designed as 
well as for longeron shadowing events which were not characterized until the ISS was fully assembled. 
This characterization also helped ground teams resolve the unexpected dynamics during deployment of 
the first pair of Solar Array Wings on STS-97 as well as the tear in one of the P6 solar array wings that 
occurred on October 30, 2007. 

The modal survey and sine sweep of the P6 truss was also performed in the Space Shuttle Payload 
Modal Test Bed at MSFC. Mass simulators for all three radiators as well as the BGA/SAW combination 
and the Battery ORUs were included in the modal test article so that the proper dynamic response could 
be elicited from the test. This test was required for providing a dynamic math model for the cargo 
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element to both the Shuttle and ISS Programs. The P6 structure was then shipped to the Lockheed 
Martin-Denver facility where acoustic simulators were installed in place of the mass simulators used for 
the modal testing and the cargo element was tested to 141dB OASPL environment for one minute. 
Several PV Radiator units were acoustic tested at the component level for three minutes and 
subsequently flown in order to save program cost. These PV Radiators were functionally deployed after 
the acoustic test and structural analysis showed no significant fatigue damage was accumulated on the 
hardware from the sound pressure environment. 

Acoustic testing on these full-bay truss elements was performed out of concerns for characterizing the 
direct impingement of the acoustic environment on large ORUs such as radiators which were acoustic 
receivers as well as for verification that the design vibration environment derived for these externally 
mounted ORUs was sufficient to prevent them from becoming a catastrophic hazard to the Space 
Shuttle Orbiter during launch (Figure 141). 

The S6 truss segment launched aboard STS-119 on March 15, 2009. Beyond the usual refurbishment of 
incidental wear incurred during structural testing, inspection in the trunnion regions and analysis of the 
structural test loading were performed in order to show that the refurbished P6 structural test article 
could be safely outfitted and launched in the Shuttle. Other than some differences in the battery 
complement, the S6 truss contained solar array wings, a beta gimbal and a PV radiator similar to the P6 
truss segment. 
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Figure 141 - P6 truss in the Payload Canister. 
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SO Truss/Module-to Truss Structure/Lab Cradle Assemblv/Mobile Transporter 


The SO Truss is the center element of the ISS truss structure and the hub for electrical power and 
thermal management utilities between the truss segments and the module pattern. It was launched on 
STS-110 on April 8, 2002. The SO structural certification involved both launch and on-orbit loads as well 
as detailed simulation of the mating event between it and the Lab Cradle Assembly and the structural 
analysis and testing of the Module-To-Truss Structure. 

The SO Truss was a dual-keeled, four-trunnion, full-bay payload which underwent static, modal and 
acoustic testing. The static and modal testing was performed at The Boeing Company, Huntington 
Beach, CA. The NASA-JSC Vibration and Acoustics Test Facility performed the acoustic testing in the 
facility's reverberant acoustic chamber. The SO truss was subjected to a series of static tests for both 
launch and on-orbit loads. The tests included static tests to 1.4 x limit load applied through the longeron 
and keel trunnions to simulate ascent loads and an Orbiter trunnion relative displacement load case. 
Launch load cases for the Mobile Transporter interface were also performed. It also included tests to 1.5 
times the limit, on-orbit loads for a forward strut group and an aft strut group of the Module-To-truss 
Structure, the SO interface to the Lab Cradle Assembly, the Segment-to-Segment Attach System, the 
Mobile Transporter (MT) Interface, the Power Data Grapple Fixture and the MT emergency stop. Views 
of the finite element models used for test correlation are shown in Figure 142 [72]. 

A modal survey test of the SO Truss was performed in order to characterize the element for both Shuttle 
transport to orbit and the on-orbit dynamic environment. This modal test included many mass 
simulators, including the Mobile Transporter structural test article. Since the SO truss was the central 
structural element that interfaced with the module pattern, fully characterizing the dynamic behavior of 
this element was essential. Once the modal test was completed, mass simulators were replaced with 
acoustic simulators and the test article was shipped to JSC for acoustic testing. The SO STA was 
subjected to an OASPL of 141 dB for sixty seconds and passed the test successfully. The SO flight article 
was not subjected to any structural testing since the design and construction approach was identical to 
the SO STA. 

In order to interface the SO Truss with the U.S. Lab, a temporary stowage structure called the Lab Cradle 
Assembly was launched on an earlier Shuttle flight and bolted to the outside of the "Destiny" laboratory. 
It contained a mechanical claw and guides which interfaced with a capture bar and alignment pins on 
the SO truss. This system, collectively known as the Module-to-Truss Structure Attach System (MTSAS) 
was used to soft-dock the SO truss to the "Destiny" Laboratory temporarily while the EVA crewmembers 
deployed and fastened the four Module-to-Truss Structure strut groups to provide the permanent 
interface and structural load path to the module pattern. The active half was attached to the Lab Cradle 
Assembly which was mated to both the Aft-Ring and Mid-Ring of the U.S. Lab (Figure 143) [73]. The 
Passive half was attached to SO (Figure 144) [74]. Both halves of the MTSAS were fit-checked with one 
another prior to launch and, in combination with fit-checks of the MTS hardware, dynamic modeling 
simulations of the mating event, Neutral Buoyancy Lab tests and ground-based deployments of the flight 
hardware, the SO truss was successfully attached to the ISS. 


114 










MTSAS ACTIVE 



Figure 143 - Active half of the MTSAS. 
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Figure 144 - MTSAS Passive Half. 

The SO, Sl/Pl and S3/P3 trusses were bolted assemblies of machined bulkheads and open cross-sections 
fabricated from aluminum 2219 plate and bar stock. Each member was fastened to each other with 
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multiple bolts. The Module-To-Truss Structure (MTS) struts interfaced with the U.S. Lab through a set of 
EVA installed fasteners integrated to an attach plate on the end of each strut group. These connections, 
once assembled by EVA had to withstand on-orbit dynamic loads as well as pressure and thermal cycling 
for the life of the ISS (Figure 145) [75]. The SO truss provides a good example of some of the issues with 
designing and analyzing the bolted joints on the ISS. Ensuring the structural integrity of the bolted joints 
across the ISS was a continuous challenge throughout the development phase of the ISS Program. 
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MTS Forward Struts 


View Looking Aft 


Figure 145 - Module-to-Truss Structure Forward Struts, Lab Cradle Assembly and MTSAS. 

NSTS 08307, "Criteria for Pre-loaded Bolts" was the governing document for analysis of bolted 
connections on the USOS ISS elements. This document presents various methods for preloaded joint 
analysis. Uncertainty factors for applied preload, preload losses due to thermal effects, typical nut 
factors and the recommendation to perform application specific torque tension testing are included in 
this document. Because of the myriad of applications, there were some concerns that the methods in 
this document result in overly conservative joint designs. Also, some of the recommendations for 
preload loss and nut factors may not be applicable to the unique structural designs used in all spacecraft 
applications. The bolted joint analysis criteria was recently revisited by industry experts and a multi- 
center team of NASA structural engineers to incorporate ISS lessons learned and develop new, less 
conservative preloaded joint analysis criteria. This will be published as NASA-STD-5020, Requirements 
for Threaded Fastening Systems in Spaceflight Hardware. 
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For the MTS strut interface, the attach bolts between the MTS Structure and the "Destiny" Lab Module 
had to be sized to be installed with the maximum torque available to the EVA crewmembers using the 
Pistol Grip Tool (PGT) and yet still be strong enough to maintain a preloaded joint over the life of the ISS. 
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Figure 146 - Module-To-Truss structure showing aft and forward strut interface plates. 

The massive EVA assembly task of the ISS (exceeding 150 spacewalks as of 10/28/10) was made possible 
due to the teamwork and extensive upfront engineering to make each on-orbit assembly task friendly to 
the EVA crew. The design challenges for the structural engineers to develop many EVA bolted interfaces 
were complex. Structural analysis taking into account preload uncertainties, tolerances, thermal effects 
and PGT performance were performed for each EVA joint provided ground engineers the data to advise 
the EVA crewmembers to apply higher installation torques, if required, when a bolt could not be seated 
(Figure 146)[76]. In addition to bolted joint analysis, worksite analysis and strategic placement of 
handholds and foot restraints, every removable and replaceable ORU had tolerance analysis performed 
for maximum/minimum material conditions and on-orbit thermal differential to assure that they could 
successfully be removed and replaced on-orbit. Multiple spacewalks have been performed removing 
and replacing ORUs of various sizes and no issues due to installation/removal tolerance mismatch have 
occurred. 
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The SO truss contained all of the utility trays and umbilicals that distributed power and cooling from the 
primary power and active thermal control systems. A detailed tolerance analysis of the fit of all of the 
Module-to-Truss structure strut groups along with each deployable umbilical tray that was launched 
attached to SO was performed to assure that the dimensional stack-up of the different on-orbit mated 
interfaces did not exceed the adjustability and compliance that was designed into the various struts, 
fluid lines, electrical lines and mechanical interfaces between the trays and the module pattern. In 
addition, "on-orbit constraints testing" was performed for all electrical and fluid connector and umbilical 
tray connections to be made by EVA crewmembers. These tests involved exercising the individual 
umbilical trays and connections on the ground prior to launch using simulators to verify to the greatest 
extent possible that the EVA mating of these trays and umbilicals would take place successfully. It was 
during an on-orbit constraints test of one of the SO to Lab umbilical trays that interference was noted in 
the hinge joint of the tray that would have prevented successful deployment on-orbit. This problem was 
corrected and the tray was successfully deployed during the STS-110 mission. 

The SO truss was launched to orbit on April 8, 2002 on the STS-110 mission. It was installed on the 
"Destiny" laboratory on April 11, 2002 during the first of four spacewalks performed on that mission to 
perform the myriad of structural and utility line mating operations to attach the truss segment to the 
station. The successful installation of the SO onto the ISS heralded the beginning of the construction of 
the backbone of the ISS. 

Sl/Pl Truss. Thermal Radiator Rotary Joint (TRRJ) and Central Thermal Control System Heat Rejection 

System (HRS) Radiator 

The SI Truss (and its companion PI Truss) contains the thermal control system for the ISS. Each truss 
carries three HRS radiators in their stowed configuration, the Thermal Radiator Rotary Joint (TRRJ) 
(provided by Lockheed Martin - Sunnyvale, CA), an Ammonia tank, a Nitrogen tank and a Pump Module 
(one of which was changed out by EVA in August 2010) (Figure 148)[78]. 

A static, modal and acoustic test campaign was undertaken on this element, along with a dedicated 
static test on the deployed HRS radiator. The truss element static test was performed at The Boeing 
Company - Huntington Beach, CA. The static test campaign for launch loads was reduced to a single load 
case of 1.4 times limit loads due to schedule and budget constraints. The Segment-to-Segment Attach 
System (SSAS) and the PDGF interfaces were tested to 1.5 x on-orbit limit loads. An excellent discussion 
of the static test is provided in the paper "International Space Station Alpha (ISSA) Starboard Integrated 
Truss Segment 1 (SI) Static Loads Structural Qualification Test - A Recipe for Success" by S. Zimmerman 
and G. Barnett [79]. The modal test campaign included mass simulators for the HRS radiators and TRRJ 
(Figure 149) [80], the ammonia tank assembly (Figure 150) [81], the nitrogen tank assembly (Figure 151) 
[82] and the pump module. A moment of drama occurred after the modal test when the SI STA was 
being lifted from its test stand for shipment to JSC for the acoustic test. The aft trunnions had not been 
unbolted so the article was lifted by its forward trunnions only during the move operation. The test 
article was inspected and structural analysis performed for this inadvertent load case. No damage or 
overstress condition was indicated. 
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Figure L4~3 SO Segment Inboard Profile On-Orbit Forward View 
Shroud $ Not Shown 

Figure 147 - Umbilical trays represented between SO truss and the module pattern. 

Major ORU assemblies such as the TRRJ, Pump Module, Nitrogen Tank Assembly and Ammonia Tank 
Assembly were subjected to their own dedicated qualification programs which included pressure, static 
loads, and modal and vibroacoustic tests. The data from the component level tests was included in the 
integrated truss element math models where required (Figure 152) [83]. For example, the TRRJ was 
subjected to component-level protoflight static loads, modal survey and random vibration testing and its 
pressurized components were both qualification and acceptance pressure and leak tested. Government 
Furnished Equipment (GFE) such as the Crew and Equipment Translation Aid (CETA) cart underwent 
component level static loads, modal survey and vibroacoustic tests. The interface to the CETA cart on 
the SI truss was static tested to launch loads but a CETA cart mass simulator was used during the modal 


120 


test and an acoustic simulator was used during the acoustic tests. The modal test was performed at the 
Space Shuttle Modal Test Bed at MSFC [84]. 



Figure 1 
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Figure 148 - Schematic of the SI Integrated Truss Assembly in its launch configuration. 

There was an additional component static test of the deployed Central Active Thermal Control System 
HRS radiator to 1.2 times the predicted limit load. The deployed radiator would be subject to plume 
loads and transient dynamic loads transmitted through the ISS structure from berthing, docking, reboost 
and EVA (Figures 153 [85]and 154 [86]). SSP 30559 required that structures whose primary design loads 
were on-orbit events either are static tested to 1.5 times limit load (ultimate load) on a dedicated test 
article or to 1.2 times limit load for a protoflight unit and be designed with a minimum yield factor of 
safety of 1.25. 

At the Lockheed-Martin facility in Dallas, TX, the HRS radiator was deployed horizontally and offloaded 
from above by a track system. A point load was applied at the end of the radiator to simulate 1.2 times 
the on-orbit load. The radiator base and support structure were instrumented to record loads and the 
deployed radiator was instrumented to record deflections. While the load distribution through the 
radiator structure was well within predicted values, the base stiffness was insufficient to prevent 
excessive lateral deflection of the radiator. The radiator deflected nearly three times more than 
predicted. In the ISS configuration, this excessive deflection would have caused contact between the 
three adjacent radiator ORUs. Based on this test, the radiator base support was redesigned to increase 
stiffness and the test was re-run with acceptable deflections recorded. 
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Figure 149 - Detail of the TRRJ, radiator beam and HRS radiators. 
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Figure 150 - Ammonia Tank Assembly Schematic 
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Figure 151 - Nitrogen Tank Assembly schematic. 



Figure 152 - ITS SI Integrated dynamic math model. 

The acoustic test performed at NASA-JSC exposed the SI STA to a 141 db OASPL for sixty seconds 
(Figures 155 and 156) [87]. For that test, the flight TRRJ, three flight FIRS radiators and the qualification 
pump module, ammonia tank and nitrogen tank ORUs were installed on the SI STA in order to qualify 
this hardware to the acoustic environment. This test was completed successfully. 
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Figure 153 - Single deployed HRS radiator configuration. 

The SI truss was successfully launched aboard STS-112 on October 7, 2002 and its companion PI truss 
was launched aboard STS-113 on November 25, 2002. An imagery survey in early September, 2008 
detected a delamination on the facesheet of one of the HRS radiator panels on the SI truss (Figure 157). 
The root cause of the anomaly is currently under investigation. 
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Figure 154 - Three deployed HRS radiators on the SI truss. 
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SI STA 141 dB(OdB) Run 9 
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Figure 155 - SI STA Acoustic Test Environment (+10% contrast again). 
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Figure 156 - SI STA acoustic test environment. 



Figure 157 - ISS radiator damage on the SI truss. 
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S3/S4/S5 trusses. Solar Alpha Rotary Joint (SARJ) and Beta Gimbal Assembly (BGA) 


The S3/S4 (and its companion P3/P4) truss elements were a joint effort between The Boeing Company - 
Huntington Beach, CA (formerly McDonnell Douglas, which provided the S3 truss), Lockheed-Martin - 
Sunnyvale, CA (which provided the Solar Alpha Rotary Joint, or SARJ) and The Boeing Company - Canoga 
Park (formerly Rocketdyne) which provided the S4 truss segment. While the S3 segment (including the 
SARJ) had a dedicated static test article, the S4 truss segment was intended to be refurbished as a 
protoflight structure and subsequently flown (Figure 158) [88]. Therefore, the static test cases for the 
Orbiter launch and landing events were only to 1.1 times limit load. The S3/S4 truss element was the last 
in the test series of USOS truss elements so by this time there were several static test campaigns to draw 
the data used to justify this approach. On-orbit interfaces such as the SSAS and the Unpressurized Cargo 
Common Attach System (UCCAS) were tested to 1.5 times limit load. The static testing as well as a 
modal test for dynamic math model verification was performed at MSFC. The acoustic test to 141dB 
OASPL was performed at NASA-JSC (Figure 159). The S3/S4 acoustic test in 2000 was the last major flight 
element acoustic test performed in that facility. All structural tests were completed successfully despite 
having a large section of the MSFC static test fixture dropped on the S3 truss segment during test set-up. 

Major components of the S3/S4 segment were tested individually. The SARJ STA (Figure 160) [89] was 
subjected to a static and a modal test (Figure 161)[90]. The test results were used to correlate the math 
SARJ math model (Figure 162) [91]. The SARJ was certified in two configurations: a launch configuration, 
where launch locks transmitted the induced loads during the transportation to orbit around the 
mechanism and the on-orbit configuration where the launch locks are removed and the Alpha Joint 
Interface Structure (AJIS) struts are installed via EVA. The SARJ static test campaign included an ultimate 
loads test to both 1.4 times the launch loads and a separate ultimate loads test to 1.5 times the on-orbit 
loads. SARJ on-orbit loading was a combination of mechanical and thermally induced loads, with thermal 
loads being a significant contributor due to the differential stiffness of the AJIS struts with the 
surrounding structure. 

The P3/P4 truss segment was launched to orbit aboard STS-115 on September 9, 2006 with its twin 
S3/S4 truss segment launched aboard STS-117 on March 15, 2007. The SARJs on both elements were 
successfully activated and all four solar array wings were successfully deployed. The starboard SARJ 
began to exhibit wear on its race ring in 2007 which caused excessive vibration to be transmitted 
through the ISS structure. During the STS-126 mission of November/December 2008, EVA crewmembers 
applied lubrication to both SARJ race rings and resolved this problem. 
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Figure 158 - Protoflight structural testing decision package for Rocketdyne (now Boeing-Canoga Park) 

integrated truss elements. 
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Figure 159 -S3/S4 STA in the NASA-JSC Reverberant Acoustic Chamber. 
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FIGURE 4 - SARJ STRUCTURE ORIENTATION, LOCAL MODAL SURVEY TEST 
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Figure 160 - SARJ STA configured for its component-level modal test. 


FIGURE 5 

LOCAL MODAL TEST SETUP 
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Figure 161 - SARJ Modal Test Set-up. 
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FIGURE 1 - SARJ INBOARD FIXTURE MODEL 


Figure 162 - SARJ Math Model used for Modal test Correlation. 

The P5 truss (and its companion truss segment S5) was not static tested. Only a modal test was 
performed in the Space Shuttle Payload Modal Test Bed at MSFC to verify the dynamic math model for 
Orbiter and ISS integration. An interesting issue arose during the P5 modal test. Since the struts which 
make up P5 were axial force members, the "play" inherent in each strut installation caused the first 
natural frequency to be slightly different for the same input force. This non-linearity was thoroughly 
scrutinized by the dynamicists responsible for the testing and a verified math model was provided to 
both the ISS and Shuttle Programs with the help of sensitivity studies to define the effects of the non- 
linearity. P5 was launched aboard STS-116 on December 9, 2006 and S5 was launched aboard STS-118 
on August 8, 2007. 

The Beta Gimbal Assembly was attached to the IEA through an EVA-deployable four-bar linkage. A 
protoflight static test of the four bar linkage to 1.2 times the predicted on-orbit loads was performed. 
This test was particularly useful when during deployment of one of the BGAs, only three of the four bars 
fully locked in place. Engineers on the ground were able to use the results of the static test to 
demonstrate structural integrity with only three of four linkages seated. 


ISS Composite Rack 

Most of the internal equipment and payload hardware for the USOS modules was transported to orbit in 
bookcase-shaped, graphite-epoxy composite racks. Manufactured by The Boeing Company in Huntsville, 
Alabama, these racks were designed to be installed into a pressurized element both on the ground and 
on-orbit. Common interfaces between the rack and the interior pressurized module structure are 



present within Node 1, Node 2 and Node 3, the U.S. Lab, the Airlock and the MPLM. The H-ll Transfer 
Vehicle (HTV) was also designed to accommodate these composite racks. The majority of large 
experiments and critical ISS systems equipment is brought to ISS fully integrated in these racks. Each 
rack is designed to be transported to and from orbit with a requirement for 15 launches and landings 
through its lifetime. Launch and return of some of these racks is via the MPLM. 

With the variety of possible payload and rack equipment configurations, the structural verification test 
campaign had to provide data that would be generic enough to be applicable for verifying a myriad of 
rack applications, and yet be specific to physically-realizable equipment configurations. For example, 
there were four-post and six-post International Standard Payload Racks, four-post and six-post 
equipment racks, two types of stowage racks which had interfaces with an Aisle Stowage Container, and 
drawer and equipment configurations tailored for each rack application. 

After a great deal of discussion between the rack developers at Boeing-Huntsville and the ISS and 
Shuttle Program structures teams, a strategy was agreed upon to provide the required static strength 
and dynamic math model verification data for the various racks. The Dash-6 Rack modal survey in both 
fixed-base and free-free configuration included four shelves loaded with various distributed masses 
amongst the shelves. The Dash-4 Rack modal survey was tested in both fixed base and free-free 
configurations with an integrated mass of either 400 kilograms or 700 kilograms concentrated at various 
locations within the rack. Static testing of the Dash-6 Rack was performed to envelope the various 
interface loads for rack transport to and from orbit. The Dash-11 Static Loads test included load cases for 
internal equipment as well as the Aisle Stowage Container. During this static loads test series, the rack 
post failed prior to 140% of limit load. The Dash-11 rack was determined to be sufficiently similar to the 
Dash-4 rack so that no modal test of the Dash-11 rack was required [92]. 

The rack posts were composite I-beam sections with the shelves attaching to one of the I-beam flanges. 
The inertia loads of equipment attached to the shelves applied a torsion load to the flange/web 
interface that exceeded its structural capability. A test program was undertaken to characterize the 
strength of this interface and assure that the weight of the equipment on the rack shelves would be less 
than this value for all rack applications. After the maximum shelf load was recalculated, the static test on 
the rack post due to shelf loading was performed successfully to 140% of limit load. In addition, the 
buckling calculation for the large curved panel which composed the back of the rack showed that this 
panel could buckle under launch and landing loads. A hat-section stiffener was incorporated into the aft 
panel design, reducing the unsupported length of the aft panel and alleviating this concern. The racks 
have been flown to and from orbit without any issues since 1998 (Figure 163). 
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Figure 163 -Rack being maneuvered into its position inside the Lab Module. 

Other rack hardware has since been developed to provide transportation of payload hardware to and 
from orbit, such as the Resupply Stowage Platform (RSP). This hardware is essentially a plate which ties 
into the rack attach points within the MPLM. Stowage bags filled with soft goods and other equipment 
are strapped to the front and back of the RSPs. The structural verification of this configuration included 
a modal survey and static test as well as detailed characterization of the strap configurations to assure 
that sufficient preload was applied to prevent adjacent bags from contacting during launch. Such 
contact could cause unacceptable load sharing between the platforms. During static testing, excessive 
deflections of the bags were noted which led to the development offences around each of the bags 
which prohibited load-sharing between adjacent bags during launch or landing. 
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Structural Life Certification Approach 


FLAGRO vs. Fatigue Testing 

The primary tool used to verify the structural life of metallic structures on ISS was FLAGRO (now 
NASGRO), an analysis tool developed by NASA for fatigue crack growth and fracture analysis. SSP 30558 
defined the activities required by the ISS hardware developers to minimize the risk of structural failure 
due to crack propagation. The on-orbit life of the ISS primary structure was specified as 15 years from 
delivery of the hardware element to orbit. Transient loading events and their accompanying load 
spectra were derived and fracture and fatigue analysis per SSP 30558 was performed on all ISS elements 
to certify the hardware for this 15-year on-orbit service life. All loading events from the time of 
manufacture, including any structural testing, ground transportation and delivery to orbit were 
encompassed by the load spectra used in the structural life analysis. A scatter factor of four based on 
the metallic material fatigue data available was used on the load spectra. 

FLAGRO was used by NASA, JAXA and ESA to perform structural life verification. The Russian 
contributors to the ISS employed fatigue testing to certify the structural life of their elements using a 
scatter factor of 8 for their fatigue testing on the load-bearing interfaces of both the FGB and the Service 
Module. With the proposal to extend the life of the ISS to at least 2020, a structural life extension effort 
is underway comprised of additional NASGRO analysis by NASA, ESA and JAXA, and additional fatigue 
testing by the Russians. On January 14, 2009, anomalous thruster firings during a Service Module 
reboost imparted significant oscillations into the ISS structure. While no immediate structural integrity 
concerns were identified based on analysis of this event, the life extension efforts for the ISS will use all 
loading events measured on the ISS to date using the on-orbit instrumentation as well as prediction for 
future on-orbit loads from visiting vehicle, maneuvers and EVA. 

The NASGRO material database is the analysis program's greatest strength as well as its biggest liability. 
Since all possible material product forms, heat treatments and crack growth orientations are not 
available in the database, users must make assumptions as to what data is applicable to their particular 
piece of flight hardware. Even when the proper similitude between the database and the flight 
hardware exists, any production lot and/or vendor source variations within the properties are not 
directly accounted for in the database. Since fracture is rarely a design driver for ISS applications 
because of stiffness-driven designs, the low duty cycle usage environment, and positive margins of 
safety for high static strength factors of safety, analysis-only service life predictions using NASGRO can 
be performed. 

Most of the ISS structure is essentially uninspectable once it is assembled. The truss elements are 
wrapped in Multi-Layer Insulation Blankets, the pressurized elements are covered with MM/OD 
protection and the interior of the ISS is filled with racks and stowed equipment. The truss structure is 
highly redundant and designed primary for launch loads and stiffness so the unlikely event of on-orbit 
damage or failure of a truss structural member is not a significant threat to ISS structural integrity. 
External surveys of the ISS using video cameras and during EVA has shown evidence of MM/OD impacts 
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on handrails and other structure and while this damage can pose a sharp edge hazard to EVA 
crewmembers, there has been no threat to the structural integrity of ISS from MM/OD impacts thus far. 
The MM/OD shielding on the majority of the ISS pressurized elements is removable and most of the 
internal pressure walls of the modules can be accessed by folding the racks down or removing 
equipment. The Module-to-Truss Structure struts can support on-orbit loads with any one strut 
removed. 

The pressure vessels were designed to an ultimate factor of safety of 2.0 to lower the working stresses 
and are leak before burst designs. The Composite Overwrapped Pressure Vessel stress rupture life for 
ISS pressure vessels became a concern when more data became available on graphite-epoxy and Kevlar- 
epoxy overwrapped pressure vessels which called the initial service life calculations into question. Since 
NASGRO can only analyze metallic materials and glass, stress-rupture life assessments for COPVs must 
be based on test data. Therefore, more testing will be done in the coming months to supplement the 
original 1994-1995 stress rupture life data upon which the service life predictions for the ISS pressure 
vessels are based. This is part of the ISS life extension effort since the ISS COPVs were only certified to a 
15-year, on-orbit service life. 

Periodic updates to the NASGRO software are made as more crack growth data is developed. Materials 
used in the Russian Segment of the ISS were tested and analysis was performed by both U.S. and 
Russian structural engineers in order for both sets of specialists to become familiar and comfortable 
with the different approaches to structural life verification. With the challenge of extending the life of 
ISS to 2020 and beyond, all of the latest material data as well as loads predictions from the ISS 
integrated math-model and on-orbit data from accelerometers and strain gages installed on the ISS 
vehicle itself will be used. 

Lessons Learned and Suggestions for Future Spacecraft 

The construction and assembly of the ISS has proven that the world can come together and accomplish 
any task if the commitment of the groups involved is strong enough. This has to be the first lesson of the 
ISS: cooperation among international partners is not only possible, but is indeed, practical and 
necessary. 

Another lesson is that complex aerospace structures can be developed and certified on a limited budget, 
if the proper attention is paid throughout the structural analysis and design process. While it could be 
argued that the protoflight structural test approach was a significant risk to the ISS Program, the 
diligence of the structural designers, analysts and test engineers involved in the development of the 
hardware managed this risk successfully. No major structural failures occurred during the test program 
and the hardware was certified with sufficient margin to appropriately conservative loads to make 
structural life extension of the on-orbit ISS possible. 

Extensive pre-test analysis was performed prior to each structural test and after some initial difficulties 
with the Node 1 pressure test campaign, a Test Design Review (TDR)/ Test Readiness Review (TRR) 
board process was instituted so that all stakeholders could review the objectives, test sequence and 
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configuration of the structural test article and raise any issues early in the structural test development 
process. This approach was fundamental to the success of the ISS and should be employed in all 
spacecraft structural test efforts. 

The amount of effort required to certify the windows on the ISS was not understood by the hardware 
developers at the outset, but once the NASA-JSC and KSC glass experts were involved an excellent 
cooperative relationship emerged between NASA, the U.S. contractors and the International Partners. 
These relationships should be established early so that the particulars of window structural verification 
are understood before the structural verification plan for the entire spacecraft is developed. 

On-orbit pre-integrated structural health monitoring instrumentation should be the standard practice 
for characterizing the on-orbit loads environment for spacecraft. The principal author and his structures 
team fought to keep the accelerometers and strain gages which comprised the Structural Dynamic 
Measurement System (SDMS) pre-integrated on the SO, Sl/Pl and S3/P3 truss elements against 
enormous Program pressure to delete them as a cost savings. The data from this instrumentation was 
invaluable in diagnosing and solving the SARJ race-ring damage anomaly which threatened the power- 
generation capability of the ISS. Instrumentation packages have been flown to ISS and installed both 
internally (Internal Wireless Instrumentation System - IWIS) and externally (External Wireless 
Instrumentation System - EWIS) by the on-orbit crew, but this has been a significant cost in both dollars 
and EVA and IVA crew time (Figure 164). Instrumentation that is already present when the spacecraft is 
launched is the most cost-effective and technically prudent strategy to gather on-orbit structural 
response data. However, rapid change in the data acquisition system technology over the long life of an 
on-orbit structure could lead to obsolescence concerns with the hardware and the data acquisition and 
transfer modes. 
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Figure 164 - On-orbit structural health monitoring instrumentation locations on ISS as of May, 2011. 
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It is crucial to monitor the condition of facility cranes and scrutinize every lifting operation when flight or 
one-of-a-kind test hardware is involved. The closest thing to a serious mishap involving ISS structures 
occurred during lifting operations with either a failure of a facility crane or a piece of structure was not 
properly unfastened prior to the initiation of a lift. Lifting operations are one of the few operations 
where unrecoverable damage could happen to a flight article structure, so every lift of this kind should 
be viewed as a critical lift, whether or not program or project requirements specify the operation as 
such. 

When performing pressure testing of habitable volumes, take care to include in the structural life 
analysis many more pressure cycles than you would otherwise anticipate. As evidenced by the Node 1 
pressurization history (Figure 165), there will always be more than one or two pressure cycles put on a 
flight unit. Aborted test runs, additional data requirements and the complexity of executing a test 
campaign will all conspire to cause additional loading cycles, so prepare for that in the up-front 
structural life analysis of the hardware. 

The changing on-orbit configuration of the ISS throughout its assembly sequence and with the addition 
of new visiting vehicles such as the ATV, HTV and potential commercial spacecraft required countless 
iterations of analysis for the development of on-orbit loads at each stage of ISS assembly and 
throughout its operational life. For any large complex structure, expect to have a structures and loads 
team throughout development and sustaining engineering. 
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Figure 165 - Node 1 Pressurization History. 
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When performing pressure testing on habitable modules, pre-test structural analysis of the test 
configuration including the effects of any internal secondary structure needs to be performed. The 
difference between the Node STA and the Node 1 internal outfitting are summarized in Figure 166 [93]. 
The major internal secondary structure in the Node STA caused it to deform symmetrically while the 
empty Node 1 pressure shell deformed asymmetrically due to the effects of its geometry and welding. It 
is recommended that any internal secondary structure that is shown by analysis to pick up a significant 
amount of load due to internal pressure be included in each pressurized element tested. 

Provide adequate time for the structures team to thoroughly analyze the structural test articles prior to 
the initiation of structural testing. Schedule and budget pressure will always be present, but the Node 1 
structural qualification was delayed significantly because of the insufficient number of structural 
analysts and a lack of thorough review of the structural analysis. The delays in the certification of this 
element rippled through the ISS program. The structure may not be the most expensive item in the 
hardware development cycle, but it is often the first, so sufficiently staffing the structural design, 
analysis and test group can avoid significant program impacts. 

The differential thermal effects on on-orbit mating elements are significant. For the PMA mating to 
pressurized elements, a standoff time period of about eight hours was required prior to mating in order 
for its CBM flange temperature to come acceptably close to the temperature of the flange on the mating 
element. Thermal standoffs were incorporated into the CBM design in order to make this operation 
possible. For the truss elements, locked-in thermal loads due to mating two truss elements at different 
temperatures could be so severe, that a flexure was incorporated into the design of the SSAS. Detailed 
thermal analyses was performed for each truss mating operation to assure that the two interfaces were 
within acceptable temperature limits at the time of mating. This issue was a concern for the major 
pressurized elements, but it was somewhat mitigated by the large thermal mass of a pressurized 
element such as a Lab or Node. 
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Figure 166 - Node 1 / Node STA Configuration comparison. 

Often, internal hardware is attached to longeron structures made of machined aluminum plate 
stockwhich loads the material in the short transverse (ST) direction. Material data for both stress and 
fracture analysis for the ST direction of structural forms and material used in these applications typically 
have to be developed by the contractor responsible for the structure at significant expense. A 
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compilation of the ST direction material data that is currently available and an effort to further develop 
and disseminate a database could be a valuable cost-savings measure for future vehicle programs. 


Conclusions 

No paper of roughly 21,000 words can do justice to the incredible human effort it took to design, 
fabricate and structurally test the hardware of the ISS. This paper is a feeble attempt at capturing the 
experience, knowledge and lessons learned of those involved for posterity. If the current generation can 
see the ISS in the sky at night and future generations can gain any value by this summary document, 
limited though it is, on the 26-year effort it took to design and fully-assemble the ISS, this enlightenment 
is its own reward. 

I would like to thank everyone who contributed to this paper as well as the many thousands of others 
whose work, though uncredited and eventually long-forgotten, made the construction of the ISS 
possible. Its presence on-orbit is the living tribute to all of you. 
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